Add User to Azure Subscription with Step-by-Step Guide

Author

Reads 469

Computer server in data center room
Credit: pexels.com, Computer server in data center room

To add a user to your Azure subscription, you'll need to navigate to the Azure portal and select the subscription you want to manage.

You can do this by clicking on the "Subscriptions" button in the top navigation bar and selecting the subscription from the list.

The next step is to click on the "Access control (IAM)" button on the left-hand menu, which will take you to the Access control page.

On this page, you can click on the "Add" button at the top of the page to add a new user to the subscription.

Prerequisites

To add a user to your Azure subscription, you'll need to have the right permissions in place.

You'll need Microsoft.Authorization/roleAssignments/write permissions, such as being a Role Based Access Control Administrator or a User Access Administrator.

This permission allows you to assign Azure roles, which is a crucial step in granting users access to your subscription.

To give you a better idea, here are some specific permissions you'll need:

  • Microsoft.Authorization/roleAssignments/write

Add Users and Roles

Credit: youtube.com, Managing Azure Subscriptions: Assigning Ownership to Users - Step-by-Step Tutorial | Microsoft Azure

Adding users and roles is a crucial step in managing your Azure subscription. You can add users to your subscription for various reasons, such as giving IT access to monitor for security, collaborating with developers, or providing access to a single resource group.

To determine whether you need to add a new user, consider the following scenarios: working on a project and needing to give IT access, working on new API protocols, needing to give access at the subscription level, or providing more visibility and transparency for projects while isolating certain parts of work.

You can add users and their roles within your subscription through Microsoft Entra ID, where access management is a critical function. Azure role-based access control (Azure RBAC) provides fine-grained access management of Azure resources.

To add a user, you must understand where you're adding them and what resources they need access to. The set of resources that a user can access is referred to as scope. For example, if you're collaborating with another developer, they might only need access at the resource or resource group level.

Credit: youtube.com, How to add user to Azure Subscription

To add a user, follow these steps:

  1. Click Access control (IAM).
  2. Click the Role assignments tab to view the role assignments at this scope.
  3. Click Add > Add role assignment.

If you don't have permissions to assign roles, the Add role assignment option will be disabled. You can also use the following resources to add or delete users and assign Azure roles:

  • Add or delete users - Microsoft Entra ID | Microsoft Docs
  • Steps to assign an Azure role - Azure RBAC | Microsoft Docs

Once you've added a user, you can assign them a role, such as the Contributor role, which is a privileged administrator role that grants access to all resources in the subscription. Alternatively, you can assign a Job Function role, which provides users with permission to perform particular job functions or tasks within the Azure environment.

The Contributor role grants the user full access to manage all Azure resources, including assigning roles to other users. To view the role assigned, go to the Access control (IAM) page under your subscription and click on "Role assignments."

A different take: Active Pim Role Azure

Grant Access

To grant access to a user in your Azure subscription, you'll need to assign a role to them. This can be done by selecting the user, group, or service principal you want to assign the role to, and then choosing the role from the list of available roles.

Hand Holding Smartphone with Internet Access to YouTube
Credit: pexels.com, Hand Holding Smartphone with Internet Access to YouTube

You can find the Members tab in the Azure portal, where you can select the user, group, or service principal you want to assign the role to. From there, you can click Select members and search for the user by display name or email address.

If you're assigning a role to a managed identity, you'll need to select the type of managed identity, either user-assigned or system-assigned, and then search for the identity.

Once you've selected the user and role, you can add a description for the role assignment, which will be visible in the role assignments list.

To make a user an administrator of an Azure subscription, you'll need to assign them the Owner role at the subscription scope. This will give them full access to all resources in the subscription.

You can find the account billing administrator of a subscription by going to the Subscriptions page in the Azure portal, selecting the subscription, and then looking under Settings > Properties.

Here are the steps to assign a role to a user in Azure:

1. Go to the Members tab and select the user, group, or service principal you want to assign the role to.

Credit: youtube.com, Give Access To First User In Azure CSP Subscription

2. Click Select members and search for the user by display name or email address.

3. Select the user and click Select to add them to the Members list.

4. Choose the role you want to assign from the list of available roles.

5. Add a description for the role assignment, if desired.

6. Click Next to complete the role assignment.

Note: The Owner role grants the user full access to manage all Azure resources and assign roles to other users.

Frequently Asked Questions

Can an Azure subscription have multiple owners?

Yes, an Azure subscription can have multiple owners. After assigning a role, the subscription will have 2 active owners.

Lamar Smitham

Writer

Lamar Smitham is a seasoned writer with a passion for crafting informative and engaging content. With a keen eye for detail and a knack for simplifying complex topics, Lamar has established himself as a trusted voice in the industry. Lamar's areas of expertise include Microsoft Licensing, where he has written in-depth articles that provide valuable insights for businesses and individuals alike.

Love What You Read? Stay Updated!

Join our community for insights, tips, and more.