Assign Azure Subscription Owner Rights

As a Global Administrator, you can manage all Azure subscriptions and management groups in your tenant by elevating your access.

When you elevate your access, you'll be assigned the User Access Administrator role in Azure at root scope (/).  This allows you to view all resources and assign access to any subscription or management group in the directory.

To elevate access, follow the instructions in Microsoft documentation: Elevate access to manage all Azure subscriptions and management groups, or perform these steps:

1. Sign in to Azure Portal as a Global Administrator.

2. Open Microsoft Entra ID. You can use the Azure search bar to find Microsoft Entra ID.

Microsoft Entra ID

1. Under Manage, select Properties.

Properties

1. Under Access management for Azure resources, set the toggle to Yes.

This toggle is only available to users who are assigned the Global Administrator role in Microsoft Entra ID.

Toggle under Access Management for Azure Resources.

1. Click Save. This will grant you permission to assign roles in all Azure subscriptions and management groups associated with this Microsoft Entra ID.

2. If required, sign out and sign back in to refresh your permissions.