# Assign Azure Subscription Owner Rights

As a Global Administrator, you can manage all Azure subscriptions and management groups in your tenant by elevating your access. 

When you elevate your access, you'll be assigned the [User Access Administrator](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#user-access-administrator) role in Azure at root scope (`/`).  This allows you to view all resources and assign access to any subscription or management group in the directory. 

To elevate access, follow the instructions in Microsoft documentation: [Elevate access to manage all Azure subscriptions and management groups](https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal), or perform these steps:

1. Sign in to Azure Portal as a Global Administrator.
2. Open **Microsoft Entra ID**. You can use the Azure search bar to find **Microsoft Entra ID**.

<figure><img src="https://content.gitbook.com/content/Z5DNbniz33mXCZoO62Rm/blobs/NmWfGiDtbLNpCwEm8n4l/Microsoft%20Entra%20ID.png" alt="" width="563"><figcaption><p>Microsoft Entra ID</p></figcaption></figure>

3. Under **Manage**, select **Properties**.

<figure><img src="https://content.gitbook.com/content/Z5DNbniz33mXCZoO62Rm/blobs/RdrAa9zAoF4ZDy8qJbFH/image.png" alt=""><figcaption><p>Properties</p></figcaption></figure>

4. Under **Access management for Azure resources**, set the toggle to **Yes**.

{% hint style="info" %}
This toggle is only available to users who are assigned the Global Administrator role in Microsoft Entra ID.
{% endhint %}

<figure><img src="https://content.gitbook.com/content/Z5DNbniz33mXCZoO62Rm/blobs/ocj821c5xpoC5nFGAk1i/image.png" alt=""><figcaption><p>Toggle under Access Management for Azure Resources.</p></figcaption></figure>

5. Click **Save**. This will grant you permission to assign roles in all Azure subscriptions and management groups associated with this Microsoft Entra ID.
6. If required, sign out and sign back in to refresh your permissions.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.platform.softwareone.com/extensions/cloud-tools/cloud-tenant-setup/azure-onboarding/assign-azure-subscription-owner-rights.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.