I've worked with many Azure customers. One of the first steps to helping a new customer with Azure is getting them to add me as a Co-Admin to their Azure subscription. While this isn't difficult, searching for it on Google leads to a list of outdated or just wrong steps. The Azure portal continues to change and get better as I write, so this too may be out of date at some point, but since it's a common use case, I'll try and keep this post updated with the latest.
Account Administrator, Service Administrator, and Co-administrator are the three kinds of administrator roles in Microsoft Azure. The following table describes the difference between these three administrative roles.
Administrative role Limit Description Account Administrator (AA) 1 per Azure account This is the person who signed up for or bought Azure subscriptions, and is authorized to access the Account Center and perform various management tasks. These include being able to create subscriptions, cancel subscriptions, change the billing for a subscription, and change the Service Administrator. Service Administrator (SA) 1 per Azure subscription This role is authorized to manage services in the Azure portal. By default, for a new subscription, the Account Administrator is also the Service Administrator. Co-administrator (CA) in the Azure classic portal 200 per subscription This role has the same access privileges as the Service Administrator, but can’t change the association of subscriptions to Azure directories. First, you need your own Azure subscription. You can signup and create one here: https://azure.microsoft.com/en-us/free/ Once created, or if you already have a subscription go to the next step. Azure currently has 2 management portals: New portal - http://portal.azure.com Classic portal - http://manage.windowsazure.comUsing the New Portal:
Find the "Subscriptions" Key icon in the list: Choose the subscription and the Access control (IAM)
Next select "Subscription admins"
Now select the "Manage" link at the top, this will launch the classic portal:
Using the Classic Portal: To Add a Subscription Co-Admin using the class portal: Navigate to the Classic Portal, then click on Subscriptions at the top of the screen: Click "Mange Administrators"
Next Click Add on the toolbar at the bottom.
Finally, add the user's Microsoft account or corporate identity:
This user is now a Co-Admin of your Azure Subscription. Removing a user is just as easily done. Co-Admin's have full permission for modifying, deleting and creating resources in your subscription. They cannot see your billing information or charges. Some things to keep in mind:
User can login to Microsoft Azure classic portal using two methods: individuals can log in using a Microsoft Account, and organizational employees can log in using an organizational account. This article describes changes to the Service Administrator and Co-Administrator functionality if you login with either method.
As a review, here’s a brief description of Service Administrator and Co-Administrator functionality:
Here are the changes to Service Administrator and Co-Administrator functionality, with the introduction of the ability to login to Azure with an organizational account:
LOGIN METHOD ADD MICROSOFT ACCOUNT AS CO-ADMINISTRATOR OR SERVICE ADMINISTRATOR? ADD ORGANIZATIONAL ACCOUNT IN THE SAME ORGANIZATION AS CO-ADMINISTRATOR OR SERVICE ADMINISTRATOR? ADD ORGANIZATIONAL ACCOUNT IN DIFFERENT ORGANIZATION AS CO-ADMINISTRATOR OR SERVICE ADMINISTRATOR? Microsoft Account Yes No No Organizational Account Yes Yes No