🚀 Mastering Azure Management with Global Admin Elevation 🌐

◆ Microsoft Entra ID and Azure resources are secured independently from one another.

◆ Microsoft Entra role assignments do not grant access to Azure resources.

◆ Azure role assignments do not grant access to Microsoft Entra ID.

◆ As a Global Administrator in Microsoft Entra ID, you can assign yourself access to all Azure subscriptions and management groups in your tenant. 

◆ Use this capability if you don't have access to Azure subscription resources, such as virtual machines or storage accounts, and you want to use your Global Administrator privilege to gain access to those resources.

◆ When you elevate your access, you are assigned the User Access Administrator role in Azure at root scope (/). This allows you to view all resources and assign access in any subscription or management group in the tenant.

◆ User Access Administrator role assignments can be removed using Azure PowerShell, Azure CLI, or the REST API.

🚀 Why would you need to elevate your access?

If you are a Global Administrator, there might be times when you want to do the following actions:

■ Regain access to an Azure subscription or management group when a user has lost access
■ Grant another user or yourself access to an Azure subscription or management group
■ See all Azure subscriptions or management groups in an organization
■ Allow an automation app (such as an invoicing or auditing app) to access all Azure subscriptions or management groups

# Perform steps at root scope #

Follow these steps to elevate access for a Global Administrator using the Azure portal.

(1) Sign in to the Azure portal as a Global Administrator.

Note : If you are using Microsoft Entra Privileged Identity Management, activate your Global Administrator role assignment !!

(2) Browse to Microsoft Entra ID > Manage > Properties.

(3) Under Access management for Azure resources, set the toggle to Yes.

(4) Select Save to save your setting.

If you found this valuable, consider sharing so more professionals can benefit. Let's keep the conversation growing! 🚀