How To Add Subscription To A User On Azure

Skip to principal content

Add or alter Azure administrator roles for managing subscriptions or services

Article
xi/19/2018
ii minutes to read

Chinese
English

During the sign-upwards procedure, users purchasing online subscriptions create an organization ID (OrgID), which is the Azure account ID and an Azure account tin manage several standard Pay-in-advance subscriptions.The OrgID is owned by the account administrator (AA), who can manage accounts and subscriptions, as well every bit perform tasks such equally deploying services for each subscription.This article explains the principal tasks and operating processes for account managers performing subscription management.

Azure accounts accept three roles that are applicable to all resources: owner, correspondent and reader.As described in the following table, each function corresponds to its own permission level.You tin grant access permissions by assigning a role to a specific range of users, groups, and apps.A maximum of 2,000 roles can exist allocated to each subscription.

Role	Description
Business relationship ambassador	An AA has OrgID logon details and is able to admission the Account Heart and perform a variety of management tasks.For example, an AA can create subscriptions, cancel subscriptions, modify subscription fees, create users, and assign users their roles. The AA can also deploy services for each subscription.
Owner	Owner has full admission to all resources including the correct to consul admission to others.
Contributor	Contributor tin create and manage all types of Azure resources only can't grant access to others.
Reader	Reader tin can view existing Azure resource within an individual subscription, only the reader cannot deploy services or assign user roles.

Add a user

In the Azure portal, in the left pane, select Azure Active Directory. （If this option is unavailable, select More than Services, and and then type Azure Active Directory in the search box.）
Select Users and groups.
Select All users, and then select New user.
Enter the user details, and then select Create.The user proper noun format must be consistent with both your OrgID and the suffix after the at sign (@).
You can view the details of the newly created user in the user list.

Assign a user role

Sign in to the Azure portal, select Subscription in the left pane, and and then select the subscription that you lot want to rename.
Select Access Command (Identity & Admission Management), and then select Add.
On the Add permissions form, select the corresponding office and the Azure Active Directory business relationship, and and so select Save to finish assigning the corresponding part to the business relationship.
Later on you have completed the setup procedure, a pop-up message confirms that you accept added user permissions.

Delete user admission permissions

Sign in to the Azure portal, select Subscription in the left pane, so select the subscription that you want to rename.
To view a listing of roles that are authorized for the subscription, select Access Control (Identity & Access Direction).
Select the role that you want to delete, and then select Delete.
To complete the deletion, select Yes.
After you accept completed the process, a pop-up message confirms that you have deleted user permissions.

View user roles and access permissions

Sign in to the Azure portal, select Subscription in the left pane, and and so select the subscription that you want to rename.
Select Access Control (Identity & Admission Direction). All the users for the subscription and their roles are displayed at the right.

Learn more than:

Modify subscription contact methods for account administrators

If you still need help to resolve your event, contact our back up team.