0

According to this blog the Classic Account Admin can create Subscriptions.

  • Is there anyone else who can create subscriptions as well? Can he delegate this administrative task through AAD roles?
  • In the new RBAC approach do we still have a 'Classic' Account Admin?

In my organization's Tenant, I have the user AAD role. I tried to create another Tenant expecting it to fail due to permissions, but it succeeded.

  • What kind of permissions are required to create a new Tenant? (since a simple 'user' was able to create it)
Gadam
  • 2,674
  • 8
  • 37
  • 56

1 Answers1

0

Account Administrator, Service Administrator, and Co-Administrator are the three classic subscription administrator roles in Azure.

In the doc, it just explains there are there type classic subscription administrator roles, it means you could create the three type admin roles in the classic subscription.

In the new RBAC approach do we still have a 'Classic' Account Admin?

It depends on the subscription you have. If you have the classic subscription, you could create the classic type admins.

What kind of permissions are required to create a new Tenant? (since a simple 'user' was able to create it)

No permissions are required to create a new Tenant. Every user could create a new free tenant.

SunnySun
  • 1,900
  • 1
  • 6
  • 8