Understanding Azure roles

There are three distinct ways of managing user access in Azure, classic roles, Azure roles, and Azure AD roles. Each controls a different aspect of the platform and is used in different ways. We will examine the three types, how they are different, and how you use them.

Classic roles

When Azure was first introduced, access to resources was controlled using just three roles, which are discussed in the following sections.

Account Administrator

Only one per Azure account. This role grants access to the Azure Account Center for managing all subscriptions within an account. When you sign up for your Azure account, you are granted this role, and it enables you to create, cancel, and manage billing for subscriptions. It also allows you to change the Service Administrator role.

Service Administrator

Only one per subscription. This role allows you to manage the services in your Azure subscription, including canceling it. It is also the only role that will...