Lost access to subscription after change directory

Question

I was changing directory of my subscription. Post that I lost admin access or read access over my subscription. Cannot create any resource or perform any action over it.

Answer 1

Hello Shivansh Agarwal,

Thank you for connecting offline to discuss about the issue. 

We understand that you are trying to change the subscription from one directory to another and unfortunately, you lost access to perform any action after the change. 

As discussed, since you are the global admin for the other tenant, you can perform elevate access so that you are assigned the User Access Administrator role in Azure RBAC.This grants you permission to assign roles in all Azure subscriptions and management groups associated with this Microsoft Entra tenant. This toggle is only available to users who are assigned the Global Administrator role in Microsoft Entra ID. 

Follow these steps to elevate access for a Global Administrator using the Azure portal. 

1.Sign in to the Azure portal as a Global Administrator. 

If you are using Microsoft Entra Privileged Identity Management, activate your Global Administrator role assignment. 

2.Browse to Microsoft Entra ID > Manage > Properties. 

3.Under Access management for Azure resources, set the toggle to Yes.

Sharing relevant document for reference: https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Thanks & Best Regards

Janaki Kota

Answer 2

Hi Shivansh Agarwal,

Thanks for reaching out to Microsoft Q&A.

This generally happens as you don't have the prerequisite access in the new subscription.

If your account is not listed as an owner, you may need to contact the administrator or owner of the directory that now controls the subscription. You need to get your RBAC roles assigned.

See: https://learn.microsoft.com/en-us/entra/fundamentals/how-subscriptions-associated-directory?source=recommendations

If the above steps don’t work or you don’t have access to anyone who can help reassign permissions, contact Azure Support directly here: https://azure.microsoft.com/en-us/support/create-ticket

Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.