Is there a way to copy all the IAM permissions on all resources from one account to another

Question

we want to migrate a few accounts to having a separate account to access resources in Azure. Is there a way to copy all IAM Access controls for an account to another account?

Answer 1

Hi @Michael Carey - Admin

Thank you for reaching Microsoft Q&A Forum!

If I understand correctly, you would like to copy all the IAM permission roles on all resources of tenant and assign the same roles to same user in another tenant.
Currently, there is no feature to transfer the roles from one tenant to another tenant. If you move a resource that has an Azure role assigned directly to the resource, the role assignment isn't moved and becomes orphaned. After the move, you must re-create the role assignment. Eventually, the orphaned role assignment is automatically removed, but we recommend removing the role assignment before the move.
However, you can Download role assignments of your resources and use the list of role assignments in new tenant.
Reference: Move Azure resources to a new resource group or subscription
List Azure role assignments using the Azure portal
Assign Azure roles using the Azure portal
Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh V.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.