How to convert / transition classic admin roles to Azure RBAC role

@Hugh Williams

Thank you for posting this in Microsoft Q&A.

There is no public documentation for steps which includes steps on how to migrate to RBAC from classic administrators.Because RBAC is the recommended way to manage access to Azure resources, and it provides more granular control over permissions than the classic administrator roles.

In RBAC there is only have one owner role and one contributor role on subscription level. These roles are highest privileged role in RBAC on the subscription level. Other built-in roles are used to handle other resources like, VM's, storage etc.

Depending on what access you need, specific permissions are defined RBAC roles.

However, you can follow below steps to migrate from classic administrators to RBAC,

• Login to Azure portal with admin account that you always use.
• First find out how many classic administrators account are assigned for your subscription.
  1. Use the Azure portal to get a list of your Co-Administrators.
• If you have any service administrators then you can assigned then Owner role in RBAC.

Below are highest privileged roles in RBAC,

• Search for subscription in search bar on Azure portal.
• Access your subscription and click on the specific subscription under which you want to perform migration.
• Click on Access control (IAM) blade on the left pane.
• Click on "Add" and then click on "Add role assignment".
• Now click on "Privileged administrator roles" tab.
• Select "Owner" role from the list and click next.
• In the next tab you can select user to whom you want to assign the "Owner" role. (You can make any user account as owner, using which you will login to Azure portal with full access on Azure)
• In the next page select the 3rd Option "Allow users to assign all roles".
• Click next and follow the instructions on screen.

This way you can migrate from classic administrators to RBAC.

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.