IT:AD:Azure:Security:Role
Summary
At a high level, Azure Roles to manage Azure Resources/Subscriptions can broadly be divided into the following two groups:
- the original Classic Portal'a Administration Roles (eg: Account Administrator, Service Administrator, Service Co-Administrator), and
-
- A list of these newer Roles is available here.
A diagram summarizing the above would be:
Notes
Azure Subscription Roles versus Other Service Roles
A common early mistake when encountering Azure for the first time is not clearly understanding that Roles are separated by Service/Subscription (Azure Subscription itself, Azure AD (a different Service), Office 365, other Services):
- Other Subscribed Services.
Azure Subscription Roles versus Active Directory Roles
Although briefly stated above and elsewhere 1), it's worth repeating: Although closely tied together at the hip, the Azure AD Service is a different Service to the Azure Service – and hence, Azure AD Roles are not the same as IT:AD:Azure:Security:Role.
I still have questions as to:
* How Azure AD's Billing administrator Role is related to Azure's BuiltIn Account Administrator Role.
* How these relate to User Access Administrator