When you elevate your access, you will be assigned the User Access Administrator role in Azure at root scope ( /). This allows you to view all resources and assign access in any subscription or management group in the directory. Use this capability if you don't have access to Azure subscription resources, such as virtual machines or storage accounts, and you want to use your Global Administrator privilege to gain access to those resources. However, if you are a Global Administrator in Azure AD, you can assign yourself access to all Azure subscriptions and management groups in your directory. That is, Azure AD role assignments do not grant access to Azure resources, and Azure role assignments do not grant access to Azure AD. Allow an automation app (such as an invoicing or auditing app) to access all Azure subscriptions or management groupsĪzure AD and Azure resources are secured independently from one another.See all Azure subscriptions or management groups in an organization.Grant another user or yourself access to an Azure subscription or management group.Regain access to an Azure subscription or management group when a user has lost access.If you are a Global Administrator, there might be times when you want to do the following actions:
Why would you need to elevate your access? For more information about GDPR, see the GDPR section of the Microsoft Trust Center and the GDPR section of the Service Trust portal. For information about viewing or deleting personal data, see Azure Data Subject Requests for the GDPR.
0 kommentar(er)
