I have a resource group in one of my accounts that has Visual Studio Professional subscription. In the resource group I have several resources including a Synapse workspace.
I have another account with a Pay as you Go subscription and I would like to grant admin access to the mentioned resource group for this account. I would like to be able to edit, test and run everything from both accounts.
Is this possible to do? If so, how? Also, could that other account be an Azure trial account too?
CodePudding user response:
Yes, it is possible to grant admin access to a resource group in one Azure subscription to another Azure subscription. You can do this by using Azure role-based access control (RBAC) and creating a custom role with the necessary permissions. You can also do this by creating a new Role assignment, selecting the subscription you want to grant access to, and then selecting the custom role you created.
It is also possible to grant access to the resource group to an Azure trial account, but keep in mind that some Azure services and features may not be available or may have usage limits in a trial account. It's recommended to check the Azure Trial Subscription Terms of Use for details.
CodePudding user response:
So I'm going to assume that you have two accounts that belong to two different Azure AD (AAD) tenants (let's say Visual Studio-tenant and PayAsGo-tenant).
Azure subscriptions can only be attached to a single AAD tenant that will manage the Azure RBAC for it. This means you would need to have both users in the Visual Studio -tenant to make this work.
If you have admin rights available for that Visual Studio -tenant, you can solve your problem by inviting your user from the PayAsGo-tenant as a guest and granting it the required rights (most straightforward is Contributor rights to the Synapse resource group).