What is equivalent of azure classic RBAC co-administrator role ?

Srinivas Yerubandi 0 Reputation points
2024-09-16T11:10:22.4633333+00:00

What is equivalent of azure classic RBAC co-administrator role ?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Marcin Policht 24,630 Reputation points MVP
    2024-09-16T11:50:16.3466667+00:00

    There is none - rather than having a single Administrator and multiple co-Administrators, you can designate multiple owners.


    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

    0 comments No comments

  2. Sandeep G-MSFT 19,436 Reputation points Microsoft Employee
    2024-09-18T06:41:50.0533333+00:00

    @Srinivas Yerubandi

    Thank you for posting this in Microsoft Q&A.

    In ARM (Azure resource manage) we only have owner role and contributor role on subscription level. These roles are highest privileged role in RBAC on the subscription level.

    Owner role is the one which is equivalent to service administrator and co-administrator role in classic subscription administrator role.

    The rest of the built-in roles allow management of specific Azure resources. For example, the Virtual Machine Contributor role allows the user to create and manage virtual machines. For a list of all the built-in roles, see Azure built-in roles.

    User's image

    You refer below article,

    https://zcusa.951200.xyz/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles#azure-roles

    For service administrator, you can have the same user account have owner role assigned on the subscription.

    You can get RBAC owner role assign to the same service administrator account on the subscription level.

    This will keep your account same access as the service administrator.

    Let me know if you have any further questions.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.