Elevating Access for Global Administrators in Azure

Skip to main content

Hashnode An Azure Cloud Lab Journey...

An Azure Cloud Lab Journey...

SC-100
SC-300
AZ-104

Command Palette

Search for a command to run...

Elevating Access for Global Administrators in Azure

UpdatedJanuary 30, 2025

•1 min read•View as Markdown

Amir Rouhanipoor

I’m Amir Rouhanipoor, an IT Consultant specializing in Azure and cloud solutions. I help organizations streamline their IT and drive growth through secure, efficient cloud technologies.

Part of seriesAZ-140

Comments

Join the discussion

No comments yet. Be the first to comment.

AZ-140

Part 2 of 10

All my notes on AZ-140

AZ-140 Note #2 Implement an Azure Virtual Desktop infrastructure

Plan to Implement Remote Desktop Protocol Shortpath Connection Options: • Point-to-Site VPN: Secure, encrypted connection between a single device and a virtual network. Ideal for developers or small-scale setups. • Site-to-Site VPN: Secure connection...

More from this blog

AZ-140 Lab tips II:

PowerShell Script for VM Size Comparison This script lists all session hosts with their host pool, VM name, and VM size across all host pools(loop through multiple resource groups): Connect-AzAccount # Get all host pools $hostPools = Get-AzWvdHostPo...

Sep 2, 2025·1 min read·10

AZ-700 Lab 03

M03 - Unit 4: Configure an ExpressRoute Gateway Exercise Scenario To connect your Azure virtual network to your on-premises network using ExpressRoute, you must first create a virtual network gateway. A virtual network gateway serves two key purposes...

Jul 14, 2025·4 min read·28

AZ - 700 Lab 2

M02-Unit 3 Create and configure a virtual network gateway Scenario You will configure a VPN gateway to securely connect CoreServicesVnet (East US) and ManufacturingVnet (North Europe) using VNet-to-VNet VPN. Task 1: Create CoreServicesVnet and Manuf...

May 1, 2025·7 min read·31

AZ - 700 - 03 - Design and implement Azure ExpressRoute

Introduction Azure ExpressRoute is a private, enterprise-grade connection that enables secure and reliable network connectivity between your on-premises infrastructure and Microsoft’s global network. It bypasses the public internet and provides high ...

Apr 25, 2025·9 min read·101

AZ - 700 Lab 1

You need to create three virtual networks: 1. CoreServicesVnet Region: East US Purpose: Main network (web services, databases, shared services like DC/DNS). Connectivity: Needs VPN connection to on-premises. Address Space: Large (because of expe...

Apr 25, 2025·10 min read·68

A

An Azure Cloud Lab Journey...

45 posts

On this page

Why Elevate Access?How Elevated Access Works Steps to Elevate Access Removing Elevated Access

Why Elevate Access?

Global Administrators in Microsoft Entra ID may need to elevate access to:

Regain or grant access to Azure subscriptions or management groups.
View all Azure subscriptions or management groups in the organization.
Enable automation apps to access all Azure subscriptions or management groups.

How Elevated Access Works

Microsoft Entra ID and Azure resources have independent security models.
Global Administrators do not automatically have access to Azure subscriptions.
Elevating access assigns the User Access Administrator role at the root scope (/), allowing management of all subscriptions and management groups.
This role should be removed after necessary changes are made.

Steps to Elevate Access

Sign in to the Azure portal as a Global Administrator.
Go to Microsoft Entra ID > Properties.
Enable Access management for Azure resources by setting the toggle to Yes.
Click Save, then sign out and sign back in.
You now have User Access Administrator permissions at the root scope.

Removing Elevated Access

Sign in as the same user who elevated access.
Navigate to Microsoft Entra ID > Properties.
Set the Access management for Azure resources toggle to No.
Sign out as Global Administrator.

This setting is user-specific and does not apply to all Global Administrators.

10 views

© 2026 An Azure Cloud Lab Journey...

Members
Archive
Privacy
Terms