I am a Global Admin but don’t have access to Azure Subscriptions.

I am a Global Admin but don’t have access to Azure Subscriptions.

One of the questions I get frequently is “If you are a Global Administrator, can you grant yourself access to the Azure Subscriptions?” The answer is YES you can and straight forward as well.

To get started, navigate to Azure Active Directory and sign in with your Global Administrator Account.

Under Azure Active Directory scroll down and select properties.

On the properties page, scroll down till you see the option “Access management for Azure resources”

If you are a Global Administrator, there might be times when you want to do the following actions:

• Regain access to an Azure subscription or management group when a user has lost access
• Grant another user or yourself access to an Azure subscription or management group
• See all Azure subscriptions or management groups in an organization
• Allow an automation app (such as an invoicing or auditing app) to access all Azure subscriptions or management groups

Switch the toggle to “Yes”

Switch the toggle to “YES” and then at the top of the page click on “Save”

This change will allow you to get access to all Azure subscription in your organization.

Key thing to remember is to make sure your organization has a limited number of Global Admins and PIM (privilege Identity Management) in place, or you have granted support staff access to resources via RBAC groups.

PS. Enable Conditional Access Policies to enforce MFA for Admin Roles. (Learn more Here)

#KeepSafe.

Sharing is caring!