Impossible operate on my Azure Free account

sb 0

Hi all,

after deleted erroneously some role from my user, I'm no longer able to operate with my subscription/account. I deleted some role from my user and now it seems be blocked. I'm not able to add permission/role again. It's a deadlock. I'm trying to delete subscription and create a new one but being the trial account I can't it.

Some advices? How I can unlock it?

Regards

Patchfox 3,926 Reputation points

2024-09-21T14:39:06.04+00:00

Ok, that sounds not great.

In general, you should still have an identity with a global admin role in the tenant because you can't remove this role from the last user in your tenant. It's the lock-out protection. So a global admin can only remove permissions or the global admin role from other global admin identities but not from self.

Could it be possible that you want to do the actions with an account that no longer has permission but there is another account with GA permissions?
sb 0 Reputation points

2024-09-21T15:34:05.5066667+00:00

I'm new to azure... could you give me some instruction in order to do this check?

Thanks in advance
Patchfox 3,926 Reputation points

2024-09-21T15:58:26.14+00:00

The easiest way is when you login into the Azure portal via the following link:
https://portal.azure.com/#view/Microsoft_AAD_IAM/RolesManagementMenuBlade/~/AllRoles/adminUnitObjectId//resourceScope/%2F
You should see the Roles and administrators blade.

There you could search for Global Admin and see the Assignment Count in the column.

If it is more than zero, you can check which user has the permissions, when you click on the number (link in blue)
sb 0 Reputation points

2024-09-21T16:57:30.6+00:00

Thanks for support. I follow your instruction and the global admin is already set for user I'm using. Despite that, I'm not able to perform a lot of actions. I attach 3 screenshot. Regards

Screenshot 2024-09-21 at 18.50.53.png

Screenshot 2024-09-21 at 18.53.12.png

Screenshot 2024-09-21 at 18.44.20.png
Patchfox 3,926 Reputation points

2024-09-21T18:55:27.43+00:00

Ok I think whats your problem.

You need to elevate your permissions to manage Azure/ARM (Azure Resource Manager)

There is a permission hierarchy diagram, to understand what I mean:

https://zcusa.951200.xyz/en-us/azure/role-based-access-control/media/elevate-access-global-admin/elevate-access.png

To elevate your permission of Global Admin für Azure Management follow the instructions here:

https://zcusa.951200.xyz/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal
sb 0 Reputation points

2024-09-23T13:22:29.3166667+00:00

Hi Patchfox and thanks for your time.
I checked that setting and it was already on YES.

Look at attachment please.Screenshot 2024-09-23 at 15.17.20 3.png
Akhilesh Vallamkonda 9,840 Reputation points Microsoft Vendor

2024-09-26T17:08:00.0133333+00:00

Hi @sb
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
sb 0 Reputation points

2024-10-07T23:16:38.1333333+00:00

Hi akhilesh, unfortuntely I not yet resolved... my concern is that I will be charged after trial period due to the fact that I can't manage my subscription and delete my resource

1 answer

Akhilesh Vallamkonda 9,840 Reputation points Microsoft Vendor

2024-09-23T19:16:32.5333333+00:00

Hi @sb
Could you please check now that you able to assign the roles to users? if you are unable to do, please check your role under your profile and see what role you have been assigned.
For reference Assign user roles with Microsoft Entra ID
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Impossible operate on my Azure Free account

1 answer

Your answer