Global Admin and Azure role assignments

Author: rolyon

articles/role-based-access-control/elevate-access-global-admin.md

@@ -5,7 +5,7 @@ author: rolyon
 manager: amycolannino
 ms.service: role-based-access-control
 ms.topic: how-to
-ms.date: 02/12/2025
+ms.date: 03/10/2025
 ms.author: rolyon
 ms.custom: devx-track-azurecli
 ---
@@ -337,11 +337,13 @@ When you call `elevateAccess`, you create a role assignment for yourself, so to
 
 ## View users with elevated access
 
-If you have users with elevated access, banners are displayed in a couple locations of the Azure portal. This section describes how to determine if you have users that have elevated access in your tenant. This capability is being deployed in stages, so it might not be available yet in your tenant.
+If you have users with elevated access and you have the appropriate permissions, banners are displayed in a couple locations of the Azure portal. Global Administrators have permissions to read Azure role assignments from root scope and below for all Azure management groups and subscriptions within a tenant. This section describes how to determine if you have users that have elevated access in your tenant.
 
 ### Option 1
 
-1. In the Azure portal, browse to **Microsoft Entra ID** > **Manage** > **Properties**.
+1. In the Azure portal, sign in as Global Administrator.
+
+1. Browse to **Microsoft Entra ID** > **Manage** > **Properties**.
 
 1. Under **Access management for Azure resources**, look for the following banner.
 
@@ -353,7 +355,9 @@ If you have users with elevated access, banners are displayed in a couple locati
 
 ### Option 2
 
-1. In the Azure portal, browse to a subscription.
+1. In the Azure portal, sign in as Global Administrator with elevated access.
+
+1. Browse to a subscription.
 
 1. Select **Access control (IAM)**.