How to transition from classic administrators to RBAC for a one-man shop?

Bruce Haley 95 Reputation points
2024-03-12T06:56:39.5733333+00:00

I am the only Owner and the only Service administrator for the subscription. There are no Co-Administrators.

What should I do to carry out the instruction in the email, "Action required: Transition from Azure classic administrator roles to RBAC roles"?

Perhaps being the owner, I do not need to do anything?

Thank you.

--Bruce

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
808 questions
0 comments
Accepted answer
  1. Dan Rios 1,985 Reputation points MVP
    2024-03-16T15:33:06.8633333+00:00

    Hi Bruce.

    My understanding is you are okay as you’re an owner already.

    I would remove the service administrator role and leave it at that. I did this and have seen no issues on my subscriptions.

    You can read about it here:

    https://video2.skills-academy.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#classic-subscription-administrator-roles

    Where it confirms this:

    The Service Administrator and the Co-Administrators have the equivalent access of users who have been assigned the Owner role (an Azure role) at the subscription scope.

    So you should be okay as you are.

    Hope this helps. Please mark as accepted if it did.

    1 person found this answer helpful.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.