Can the classic Account Administrator on an Azure Subscription be changed, when the original Account Owner no longer exsists?

1.1k views Asked by At

We have several (MSDN/Visual Studio Enterprise) Azure Subscriptions that was created by users that no longer exists in our Active Directory.

As a Global Administrator I'm able to do almost everything, including giving owner rights. But I found a few things that only the classic Account Administrator can do:

  • Re-activate a deactivated subscription
  • Update Subscription Address
  • Change the Service Administrator

Is there a way to change the Account owner/Account Administrator (both names are use in Azure) of a subscription, if that user does not exist anymore?

Bonus: Is this also possible if the subscription is diabled?

Here I'm trying to reactivate a disabled MSDN/Visual Studio Enterprise subscription, but I can't because I'm not the Account Administrator: Reactivate subscription

Here I'm trying to change the Service Administrator on an active subscription. I have owner rights, but I'm not the Account Administrator: Change service admin

Here I'm trying to delete resources on a disabled subscription. But I cannot because I cannot reactive the subscription. This in turn means I cannot even delete resources and free up global unique names: enter image description here

1

There are 1 answers

4
AudioBubble On

AFAIK,

Reactivating the Disabled MSDN/VS Enterprise Subscription without Account Administrator Role access. Only the Account Administrator can switch offer on this subscription.

You should have appropriate administrator role access on the Subscription scope to manage the Subscriptions and follow the steps provided in this MS Doc for switching to different models of Azure Subscriptions.

Changing the Service Administrator with Owner Right but no-Account Admin role assigned.

I believe being the Service Administrator can change the Service Administrator details if the user is assigned with the Subscription Scope Owner role as stated in this MS Doc of Changing the Service Admin in Azure.

enter image description here

I'm trying to delete resources on a disabled subscription. But I cannot because I cannot reactive the subscription. This in turn means I cannot even delete resources and free up global unique names.

You cannot delete the resources on disabled subscription because it allows Read-only access on the resources within the disabled subscription.

If there are any issues in deleting the resources, mail the details to Microsoft Support - [email protected] so that they would assist the possible steps, or they will delete that disabled subscription from the backend by confirming your consent.