Assign Subscription Owner Role

To complete the Azure Lighthouse onboarding, you must have the subscription owner role in Azure.

Global administrators can assign the subscription owner role to the user who will complete the Azure Lighthouse onboarding.

Assigning the Owner role

To assign the Owner role:

1. Sign in to the Microsoft Azure portal as a Global Administrator.

2. Verify that you have permission to add role assignments. To verify permissions:

   1. In the Search bar, type Microsoft Entra ID.

   2. Go to the Properties tab.

   3. Under Access management for Azure resources, set the toggle to Yes. Your global admin username should be visible.

   4. Select Save.

Properties tab

1. In the Search bar, type Subscriptions, and then on the Subscriptions page, select the required subscription.

2. In the left pane, select Access control (IAM).

3. Select the Role assignments tab to view the role assignments at this scope. Then, select Add > Add role assignment.

4. On the Privileged administrator roles tab, select the Owner role and select Next.

5. On the Members tab, select the user to whom you want to assign the Owner role and select Next. You must select the user you want to use for the Azure Lighthouse onboarding.

Add role assignment

1. On the Conditions tab, select Allow user to assign all roles (highly privileged) and then select Next.

2. On the Review + assign tab, select Review + assign.

The Owner role is assigned to the user and displayed on the Role assignments tab in Azure:

Role assignments tab

Next steps

After assigning the role in Azure, navigate to the Orders page in the Marketplace Platform to complete the onboarding steps. For step-by-step guidance, see Complete Azure Lighthouse Onboarding.

Related topics

How do I troubleshoot Lighthouse activation errors?