
To add a user to your Azure subscription, you'll need to navigate to the Azure portal and select the subscription you want to manage.
You can do this by clicking on the "Subscriptions" button in the top navigation bar and selecting the subscription from the list.
The next step is to click on the "Access control (IAM)" button on the left-hand menu, which will take you to the Access control page.
On this page, you can click on the "Add" button at the top of the page to add a new user to the subscription.
Broaden your view: How to Give Access to Onedrive to Another User
Prerequisites
To add a user to your Azure subscription, you'll need to have the right permissions in place.
You'll need Microsoft.Authorization/roleAssignments/write permissions, such as being a Role Based Access Control Administrator or a User Access Administrator.
This permission allows you to assign Azure roles, which is a crucial step in granting users access to your subscription.
To give you a better idea, here are some specific permissions you'll need:
- Microsoft.Authorization/roleAssignments/write
Add Users and Roles
Adding users and roles is a crucial step in managing your Azure subscription. You can add users to your subscription for various reasons, such as giving IT access to monitor for security, collaborating with developers, or providing access to a single resource group.
To determine whether you need to add a new user, consider the following scenarios: working on a project and needing to give IT access, working on new API protocols, needing to give access at the subscription level, or providing more visibility and transparency for projects while isolating certain parts of work.
You can add users and their roles within your subscription through Microsoft Entra ID, where access management is a critical function. Azure role-based access control (Azure RBAC) provides fine-grained access management of Azure resources.
To add a user, you must understand where you're adding them and what resources they need access to. The set of resources that a user can access is referred to as scope. For example, if you're collaborating with another developer, they might only need access at the resource or resource group level.
For another approach, see: Azure Move Resource Group to Another Subscription
To add a user, follow these steps:
- Click Access control (IAM).
- Click the Role assignments tab to view the role assignments at this scope.
- Click Add > Add role assignment.
If you don't have permissions to assign roles, the Add role assignment option will be disabled. You can also use the following resources to add or delete users and assign Azure roles:
- Add or delete users - Microsoft Entra ID | Microsoft Docs
- Steps to assign an Azure role - Azure RBAC | Microsoft Docs
Once you've added a user, you can assign them a role, such as the Contributor role, which is a privileged administrator role that grants access to all resources in the subscription. Alternatively, you can assign a Job Function role, which provides users with permission to perform particular job functions or tasks within the Azure environment.
The Contributor role grants the user full access to manage all Azure resources, including assigning roles to other users. To view the role assigned, go to the Access control (IAM) page under your subscription and click on "Role assignments."
A different take: Active Pim Role Azure
Grant Access
To grant access to a user in your Azure subscription, you'll need to assign a role to them. This can be done by selecting the user, group, or service principal you want to assign the role to, and then choosing the role from the list of available roles.
Intriguing read: Azure Assign Application to User

You can find the Members tab in the Azure portal, where you can select the user, group, or service principal you want to assign the role to. From there, you can click Select members and search for the user by display name or email address.
If you're assigning a role to a managed identity, you'll need to select the type of managed identity, either user-assigned or system-assigned, and then search for the identity.
Once you've selected the user and role, you can add a description for the role assignment, which will be visible in the role assignments list.
To make a user an administrator of an Azure subscription, you'll need to assign them the Owner role at the subscription scope. This will give them full access to all resources in the subscription.
You can find the account billing administrator of a subscription by going to the Subscriptions page in the Azure portal, selecting the subscription, and then looking under Settings > Properties.
Here are the steps to assign a role to a user in Azure:
1. Go to the Members tab and select the user, group, or service principal you want to assign the role to.
On a similar theme: Azure Cosmos Db User Assigned Identity
2. Click Select members and search for the user by display name or email address.
3. Select the user and click Select to add them to the Members list.
4. Choose the role you want to assign from the list of available roles.
5. Add a description for the role assignment, if desired.
6. Click Next to complete the role assignment.
Note: The Owner role grants the user full access to manage all Azure resources and assign roles to other users.
Frequently Asked Questions
Can an Azure subscription have multiple owners?
Yes, an Azure subscription can have multiple owners. After assigning a role, the subscription will have 2 active owners.
Featured Images: pexels.com


