How to gain Global Administrator for my Entra

Question

I am the creator of Azure Subscription. However I am not the global administrator for the Entra system. How can I gain global administrator access for Microsoft Entra ID

Answer 1

Being the creator/Owner of an Azure subscription does not automatically grant the Global Administrator role in Microsoft Entra ID. Azure subscription roles (like Owner) and Microsoft Entra roles (like Global Administrator) are separate.

From the context:

• The person who signs up for an Azure subscription is assigned the Owner role on that subscription and can manage Azure resources in that subscription.
• The person who creates the Microsoft Entra tenant is automatically assigned the Global Administrator role for that tenant.
• Microsoft Entra role assignments do not grant access to Azure resources, and Azure role assignments do not grant Microsoft Entra roles.

To gain Global Administrator access to Microsoft Entra ID:

1. Identify who is currently Global Administrator
   • The user who originally created the Microsoft Entra tenant is Global Administrator by default.
   • There can be multiple Global Administrators.
2. Have an existing Global Administrator assign the role
   • A current Global Administrator (or Privileged Role Administrator) must assign the Global Administrator role to the desired account using Microsoft Entra role management.
   • They can follow the guidance in the documentation referenced under “Assign a user to administrator roles in Microsoft Entra ID” / “Assigning administrator roles in Microsoft Entra ID”.
3. If there is no accessible Global Administrator
   • If no one with Global Administrator access is available (for example, the only Global Administrator account is lost or locked), tenant recovery or support escalation is required; this cannot be self-assigned just by being Azure subscription Owner.

Once Global Administrator is assigned, that account can, if needed, elevate access to manage all Azure subscriptions and management groups in the tenant by using the Access management for Azure resources toggle under Microsoft Entra ID → Properties, which temporarily grants User Access Administrator at root scope (/).

---

References:

• Frequently asked questions about Microsoft Entra ID
• Elevate access to manage all Azure subscriptions and management groups
• Microsoft Entra built-in roles