Skip to content
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles

Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles

Written By Anoop C Nair
Last Updated September 9, 2024
Posted In Azure
SHARE

Azure Classic Administrators will be Deprecated on August 31, 2024! On that date, Microsoft will officially deprecate classic administrators in Azure. This administrative role will no longer be supported.

If you currently rely on classic administrator roles, you must take action to prevent losing access to your Azure subscriptions. Classic administrator roles in Azure include the Co-Administrator and Service Administrator.

It is crucial to convert these roles to Azure Role-Based Access Control (RBAC) roles as soon as possible to ensure continued access to your Azure resources and subscriptions. Azure Role-Based Access Control (RBAC) in Microsoft Azure is a robust access management system that enables you to control who has access to Azure resources with precise permissions.

With Azure RBAC, you can assign roles to users, groups, and applications, ensuring they have the appropriate access to perform only the tasks required for their specific role or function. This post comprehensively explains the retirement of classic administrator roles in Azure.

Patch My PC

What Happens to Azure Classic Administrator Roles after August 31, 2024?


After August 31, 2024, the Co-Administrator and Service Administrator roles will be retired and no longer supported in Azure. These roles will no longer function, and users assigned to them will lose access.

What Should We Do to Prepare for this Change?


To maintain proper access control, it would help if you immediately converted any Co-Administrator or Service Administrator role assignments to Azure Role-Based Access Control (RBAC) roles.

Azure Classic Administrators will be Deprecated on 31st August 2024 Instead, Use Azure RBAC

When you open the Azure portal, you may see a notification stating, “Classic administrators will be deprecated on August 31, 2024. After this date, all classic administrators risk losing access to the subscription. Delete classic admins without access or assign an Azure RBAC role for fine-grained access control.” The screenshot below provides more details.

Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles - Fig.1
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles – Fig.1

You can easily list the Service Administrator for a subscription in the Azure portal. To list the Service Administrator and Co-Administrators for a subscription in the Azure portal, follow these steps:

  • Sign in to the Azure portal as the Owner of the subscription.
  • Go to Subscriptions and choose the subscription you want to check.
  • Select Access Control (IAM) from the menu.
  • Click on the Classic Administrators tab to see the list of Co-Administrators.
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles - Fig.2
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles – Fig.2

How to Remove an Azure Classic Administrator

If the user is no longer part of your organization, remove their Co-Administrator access. Delete their access if the user was deleted but their Co-Administrator role wasn’t removed. Deleted users usually appear with the message “(User was not found in this directory).”

  • Select the Delete icon from the below window.
  • From the pop-up window, click Yes.
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles - Fig.3
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles – Fig.3

Convert a Co-Administrator to the Owner Role in Azure

Following these steps, you can easily convert a Co-Administrator to an Owner role in Azure, ensuring they have the appropriate permissions under the Azure RBAC system.

  • Log in to the Azure portal.
  • Go to the Subscriptions section. You can find this by typing “Subscriptions” into the search bar.
  • Click on the subscription where you want to convert a Co-Administrator to an Owner.
  • In the subscription menu, select Access Control (IAM). This section allows you to manage the subscription’s roles and permissions.
  • Click on the Classic Administrators tab. This tab lists all Co-Administrators and Service Administrators assigned to the subscription.
  • Find the Co-Administrator you want to convert to the Owner role. Click on the Assign RBAC role link in the Remediate column next to their name. This action initiates converting the classic role to an Azure RBAC role.
  • A new pane called Add role assignment will open. Here, you can review the details of the role assignment.
  • Once you have verified the details, click Review + Assign to apply for the new role.
Add Role Assignment Details
Role
Scope
Members
Description
Condition
Assignment Type
Permanent
Start Date and Time
End Date and Time
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles – Table 1
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles - Fig.4
Azure Classic Administrators will be Deprecated on 31st August 2024 Crucial to Convert to Azure RBAC Roles – Fig.4

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Azure

Azure Files Goes Cloud-Native with Entra-Only Identities and Managed Identities

Key Takeaways Managed Identity and Entra-Only identities for Azure Files help organizations build a fully cloud-native and secure storage environment by removing the need for passwords, storage account keys, on-premises Active Directory, or hybrid identity infrastructure. With native Microsoft Entra ID authentication, applications, virtual machines, and users can securely access Azure Files using identity-based authentication […]

AC Anoop C Nair 4 min read
Azure

Microsoft Dev Box Moves to Maintenance Mode as Windows 365 Takes Lead for Developer Scenarios

key Takeaways: Let’s discuss about Microsoft Dev Box Moves to Maintenance Mode as Windows 365 Takes Lead for Developer Scenarios. Microsoft announced the Maintenance mode in Dev Box, and no additional features are planned. Microsoft’s investments for developer cloud environments are focused on Windows 365, which provides a unified, scalable solution for developer scenarios. Microsoft […]

AC Anoop C Nair 3 min read
Azure

Multi-Zone Management Platform Architecture for Windows Cloud Solutions

Key Takeaways Multi-Zone Management Platform Architecture for Windows Cloud Solutions! This architecture highlights the core MicrosoftMicrosoft Azure components used to host and deliver Cloud PC services. To ensure high availability and reliability, the infrastructure is distributed across multiple availability zones within each region. This design helps protect the service from zonal outages and keeps workloads […]

AC Anoop C Nair 4 min read
Azure

How to Protect and Recover your Infrastructure with Azure Site Recovery

Key Takeaways Azure Site Recovery is a disaster-recovery service in Microsoft Azure that helps keep your applications running if a cloud region fails. Normally, your virtual machines (VMs) run in one region. ASR creates a copy of those machines in another region so that if the main region goes down, your services can continue running […]

AC Anoop C Nair 4 min read