author:genlin
There are three kinds of administrator roles in Windows Azure:
Administrative role | Limit | Description |
---|---|---|
Account Administrator | 1 per Azure account | This is the person who signed up for or bought Azure subscriptions, and is authorized to access the Account Center and perform various management tasks. These include being able to create subscriptions, cancel subscriptions, change the billing for a subscription, and change the Service Administrator. |
Service Administrator | 1 per Azure subscription | This person is authorized to access the Azure Management Portal for subscriptions in the account assigned to them. By default, for a new subscription, the Account Administrator is also the Service Administrator is the. |
Co-administrator | 200 per subscription (in addition to Service Administrator) | This person has the same access privileges as the Service Administrator, but can’t change the association of subscriptions to Azure directories. |
- Sign in to the Azure Management Portal){:target="_blank"} .
- In the navigation pane, select Settings> Administrators> Add.
- Type the email address of the person you want to add as Co-administrator and then select the subscription that you want the Co-administrator to access.
The following email address can be added as a Co-Administrator:
- Microsoft Account (formerly Windows Live ID)
You can use a Microsoft Account to sign in to all consumer-oriented Microsoft products and cloud services, such as Outlook (Hotmail), Skype (MSN), OneDrive, Windows Phone, and Xbox LIVE. - Organizational account
An organizational account is an account that is created under Azure Active Directory. The organizational account address resembles the following: [email protected]
Note
- If you are logged in with a Microsoft Account, you can only add other Microsoft Accounts as Co-Administrator. This is a security consideration to prevent non-organizational accounts from discovering if certain accounts (e.g. [email protected]) are valid accounts.
- If you are logged in with an organizational account, you can add other organizational accounts in your organization as Co-Administrator. For example, [email protected] can add [email protected] as Service Administrator or Co-Administrator, but cannot add [email protected]. Users logged in with organizational accounts can continue to add Microsoft Account users as Service Administrator or Co-Administrator.
- Now that it is possible to log into Azure with an organizational account, here are the changes to Service Administrator and Co-administrator account requirements:
Login Method | Add Microsoft Account as Co-Administrator or Service Administrator? | Add organizational account in the same organization as Co-Administrator or Service Administrator? | Add organizational account in different organization as Co-Administrator or Service Administrator? |
---|---|---|---|
Microsoft Account | Yes | No | No |
Organizational Account | Yes | Yes | No |
Only the Account Administrator can change the Service Administrator for a subscription.
-
Log on into Account Management Portal by using the Account Administrator.
-
Select the subscription you want to change.
-
In the SERVICE ADMINISTRATOR box, enter the email address of the new service administrator.
To transfer ownership of the Azure account to another. Account, see Transferring an Azure subscription.