SUBSCRIPTION I AM (RBAC)

Gabriel Moraes 370 Reputation points
2024-05-28T18:52:25.39+00:00

Hello! I'm having a problem with Azure that I can't find a way to remove a Backup Contributor role in Azure.

Case:

I have an Azure subscription and recently assigned the Backup Contributor (RBAC) role to another Azure subscription. Now I want to remove it, but the function simply appears only in the destination subscription and no longer in the source subscription. It is important to note that I recently used Azure Lighthouse to access both subscriptions in a single Azure Portal, but it does not appear in Azure Lighthouse Clients or Delegations.
I don't know what else to do, I just can't remove the backup contributor role from the target subscription.

Any help, I appreciate it.

Best Regards,

Gabriel Moraes.

User's image

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
80 questions
{count} votes

Accepted answer
  1. Sina Salam 14,551 Reputation points
    2024-05-28T21:30:29.35+00:00

    Hello Gabriel Moraes,

    Welcome to the Microsoft Q&A and thank you for posting your questions here.

    I understand that you are having difficulties to remove Backup Contributor (RBAC) role to another Azure subscription.

    To solve the issue: If the Azure Portal does not resolve the issue, you can use Azure CLI or PowerShell to remove the role assignment.

    • Using Azure CLI

    You can use Azure Cloud Shell or your local Azure CLI.

    #List Role Assignments
    az role assignment list --scope /subscriptions/<target-subscription-id> --role "Backup Contributor"
    #Remove Role Assignment
    az role assignment delete --role-assignment-id <roleAssignmentId>
    
    • Using PowerShell

    You can use either Azure Cloud Shell or local PowerShell

    #List Role Assignments
    Get-AzRoleAssignment -Scope "/subscriptions/<target-subscription-id>" -RoleDefinitionName "Backup Contributor"
    #Remove Role Assignment
    Remove-AzRoleAssignment -RoleDefinitionName "Backup Contributor" -ObjectId <ObjectId> -Scope "/subscriptions/<target-subscription-id>"
    

    I hope this is helpful! Do not hesitate to let me know if you have any other questions.

    ** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful ** so that others in the community facing similar issues can easily find the solution.

    Best Regards,

    Sina Salam

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.