5.1.2. Roles and Permissions

The Microsoft Azure account must have the role User Access Administrator for the subscription.

To validate:

1. Go to Microsoft Azure Subscription and choose the subscription
2. On the left bar click Access control (IAM)
3. Choose “Role Assignments” and check if the user is shown under User Access Administrator
   

For additional information on how to assign roles, see Assign Azure roles using the Azure portal.

The user should also be an Application Administrator.

To validate:

1. Go to Microsoft Azure – All users
2. Click the username
3. Click Assigned Roles in the left sidebar
   

If the user is not an Application Administrator, contact the Azure Admin to assign the role.