Migrate Classic Admin Roles to Azure RBAC Before April 2025

Urgent

• August 31, 2024: Azure classic administrator roles, classic resources, and Azure Service Manager (ASM) are officially retired.
• April 30, 2025: All remaining Co-Administrator and Service Administrator assignments will lose access.
• Convert any Co-Administrator or Service Administrator role assignments that are still in use right now to Azure RBAC.
  

Urgent Action Is Needed

If any of the following assignment roles are currently open in your organization:

• Service Administrator
• Co-Administrator

What will happen after April 30, 2025?

Role assignments for Co-Administrator and Service Administrator will no longer be accessible. If you don't have an Owner role assignment within the subscription scope, you will lose access to manage the subscription.

See the list of classic administrators.

• Log in to the Azure portal as the subscription owner.
• After choosing a subscription, open Subscriptions.
• Choose IAM (Access Control).
• You can be viewed by selecting the Classic administrator's tab.
  

Migrate from Azure Classic Administrator Roles to RBAC Before Access

• Log in to the Azure portal as the subscription owner.
• After choosing a subscription, open Subscriptions.
• Choose IAM (Access Control).
• You can be viewed by selecting the Classic administrator's tab.
• Select the Assign RBAC role option.
  
• After choosing the Assign RBAC role option, you can view the Add role assignment page. The role is Owner. After that, select Review + assign.
  
• You can see the notification that the Added Role assignment has been completed.
  
• After adding the Role assignment, remove the Classic administrator account because it no longer needs access. Once done, you can see the notification.
  
  
• Finally, you can check under the role assignment; you can see your name under the owner.
  

Summary

This article describes migrating from Azure Classic Administrator Roles to RBAC before access is lost. The upcoming post will cover transferring an Azure subscription to a different Microsoft Entra directory.