Add or change Azure subscription administrators

To manage access to Azure resources, you must have the appropriate administrator role. Azure has an authorization system called Azure role-based access control (Azure RBAC) with several built-in roles you can choose from. You can assign these roles at different scopes, such as management group, subscription, or resource group. By default, the person who creates a new Azure subscription can assign other users administrative access to a subscription.

This article describes how add or change the administrator role for a user using Azure RBAC at the subscription scope.

Microsoft recommends that you manage access to resources using Azure RBAC. However, if you are still using the classic deployment model and managing the classic resources by using Azure Service Management PowerShell Module, you'll need to use a classic administrator.

Tip

If you only use the Azure portal to manage the classic resources, you don't need to use the classic administrator.

For more information, see Azure Resource Manager vs. classic deployment and Azure classic subscription administrators.

Determine account billing administrator

The billing administrator is the person who has permission to manage billing for an account. They're authorized to access billing on the Azure portal and do various billing tasks like create subscriptions, view and pay invoices, or update payment methods.

To identify accounts for which you're a billing administrator, visit the Cost Management + Billing page in Azure portal. Then select All billing scopes from the left-hand pane. The subscriptions page shows all the subscriptions where you're a billing administrator.

If you're not sure who the account administrator is for a subscription, visit the Subscriptions page in Azure portal. Then select the subscription you want to check, and then look under Settings. Select Properties and the account administrator of the subscription is shown in the Account Admin box.

Assign a subscription administrator

To make a user an administrator of an Azure subscription, an existing billing administrator assigns them the Owner role (an Azure role) at the subscription scope. The Owner role gives the user full access to all resources in the subscription, including the right to delegate access to others. These steps are the same as any other role assignment.

If you're not sure who the account billing administrator is for a subscription, use the following steps to find out.

  1. Open the Subscriptions page in the Azure portal.
  2. Select the subscription you want to check, and then look under Settings.
  3. Select Properties. The account billing administrator of the subscription is displayed in the Account Admin box.

To assign a user as an administrator

Need help? Contact support

If you still need help, contact support to get your issue resolved quickly.

Next steps