Hi @Tony Mosunmade , Global Administrator privileges in Azure Active Directory do not automatically grant permission to deploy ARM templates. To enable template deployments at the tenant scope, the Global Administrator must perform the following steps:
- Elevate account access so the Global Administrator can assign roles. For more information, see Elevate access to manage all Azure subscriptions and management groups.
- Assign Owner or Contributor role to the principal that needs to deploy the templates. You can use the following commands:
For Azure PowerShell:
New-AzRoleAssignment -SignInName "[userId]" -Scope "/" -RoleDefinitionName "Owner"
For Azure CLI:
az role assignment create --assignee "[userId]" --scope "/" --role "Owner"
After completing these steps, the principal will have the required permissions to deploy the ARM template.
Please let me know if you have any questions and I can help you further.
If this answer helped you please mark it as "Verified" so other users can reference it.
Thank you,
James