Transition from Azure classic administrator roles to RBAC roles

Searchlight Admin 31 Reputation points
2024-03-13T17:20:32.3633333+00:00

I received an email stating: Action required: Transition from Azure classic administrator roles to RBAC roles.

I'm not very familiar with this, so I need very specific guidance. In my research, I saw that if I mess this up, I could get locked out of my Azure account.

I am the only person listed under the "Classic Administrators" tab and I am a Service Administrator.

If found these instructions about doing the transition to RBAC roles and I just want to confirm that they are correct.


To transition from Azure classic administrator roles to RBAC roles, you should remove the Service Administrator role and add yourself as a role assignment with the Owner role at the subscription scope. This will give you the same access as the Service Administrator. To do this, follow these steps:

Sign in to the Azure portal as an Owner of the subscription.

Open Subscriptions and select the subscription.

Click Access control (IAM).

Click the Classic administrators tab.

Add a check mark next to the Service Administrator.

Click Remove.

In the message box that appears, click Yes.

Click the Role assignments tab.

Click Add > Add role assignment.

In the Add role assignment pane, select Owner as the Role.

In the Select field, search for and select your user account.

Click Save.


Can some please confirm that these are correct instructions for my situation?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
808 questions
0 comments No comments
{count} votes

Accepted answer
  1. Marcin Policht 23,700 Reputation points MVP
    2024-03-13T21:22:39.4966667+00:00

    Follow https://video2.skills-academy.com/en-us/azure/role-based-access-control/classic-administrators

    I'd suggest adding another owner before you proceed...

    Remove the Service Administrator

    To remove the Service Administrator, you must have a user who is assigned the Owner role at subscription scope without conditions to avoid orphaning the subscription. A subscription Owner has the same access as the Service Administrator.

    Sign in to the Azure portal as an Owner of a subscription.

    Open Subscriptions and select a subscription.

    Click Access control (IAM).

    Click the Classic administrators tab.

    Add a check mark next to the Service Administrator.

    Click Remove.

    In the message box that appears, click Yes.


    hth

    Marcin

    2 people found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.