A cloud-based identity and access management service for securing user authentication and resource access
There are two separate permission systems involved:
| Permission Type | Scope | What you currently have |
| Microsoft Entra ID role (Global Administrator) | Tenant / Directory | Yes |
| Azure RBAC role (Owner/Contributor on subscription) | Azure Subscription | Missing |
Global Administrator alone does not automatically inherit subscription ownership unless:
- the subscription was originally created by that account, OR
- an RBAC role assignment still exists.
After re-authentication, the RBAC binding appears to have been lost.
Resolution:-
Step 1 — Elevate Global Admin to access Azure subscriptions
Since you are Global Administrator, you can restore access yourself using the “Access management for Azure resources” feature.
Do this:
Sign in to Azure portal
Go to: ``Microsoft Entra ID → Properties
Find:
Access management for Azure resources
Turn it to: Yes
This grants the Global Administrator temporary User Access Administrator rights at the root scope (/) in Azure RBAC.
Microsoft Docs: