Skip to content

I am a Global Admin but don’t have access to Azure Subscriptions.

I am a Global Admin but don’t have access to Azure Subscriptions.

One of the questions I get frequently is “If you are a Global Administrator, can you grant yourself access to the Azure Subscriptions?” The answer is YES you can and straight forward as well.

To get started, navigate to Azure Active Directory and sign in with your Global Administrator Account.

Under Azure Active Directory scroll down and select properties.

Graphical user interface, application
Description automatically generated

On the properties page, scroll down till you see the option “Access management for Azure resources”

If you are a Global Administrator, there might be times when you want to do the following actions:

  • Regain access to an Azure subscription or management group when a user has lost access
  • Grant another user or yourself access to an Azure subscription or management group
  • See all Azure subscriptions or management groups in an organization
  • Allow an automation app (such as an invoicing or auditing app) to access all Azure subscriptions or management groups

Switch the toggle to “Yes”

Chart, waterfall chart
Description automatically generated

Switch the toggle to “YES” and then at the top of the page click on “Save

A picture containing chart
Description automatically generated

This change will allow you to get access to all Azure subscription in your organization.

Key thing to remember is to make sure your organization has a limited number of Global Admins and PIM (privilege Identity Management) in place, or you have granted support staff access to resources via RBAC groups.

PS. Enable Conditional Access Policies to enforce MFA for Admin Roles. (Learn more Here)

#KeepSafe.

Sharing is caring!

Published inAzureAzure Active DirectoryConditional Access

Be First to Comment

Leave a Reply

Your email address will not be published. Required fields are marked *