Skip to content

Commit 875230d

Browse files
committed
Troubleshoot guest and classic role
1 parent d0d59b2 commit 875230d

File tree

1 file changed

+14
-2
lines changed

1 file changed

+14
-2
lines changed

articles/role-based-access-control/troubleshooting.md

Lines changed: 14 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ms.service: role-based-access-control
99
ms.workload: identity
1010
ms.tgt_pltfrm: na
1111
ms.topic: troubleshooting
12-
ms.date: 01/07/2023
12+
ms.date: 02/17/2023
1313
ms.author: rolyon
1414
ms.custom: seohack1, devx-track-azurecli, devx-track-azurepowershell
1515
---
@@ -573,7 +573,19 @@ If you are an Azure AD Global Administrator and you don't have access to a subsc
573573

574574
## Classic subscription administrators
575575

576-
If you are having issues with Service administrator or Co-administrators, see [Add or change Azure subscription administrators](../cost-management-billing/manage/add-change-subscription-administrator.md) and [Classic subscription administrator roles, Azure roles, and Azure AD roles](rbac-and-directory-admin-roles.md).
576+
### Symptom - Removing a guest assigned the Co-Administrator role does not the remove role assignment
577+
578+
Consider the following scenario:
579+
580+
- Add a guest user from an external tenant and then assign them the classic Co-Administrator role.
581+
- Later, you remove the guest user from your tenant without removing the role assignment.
582+
- The guest user signs in to the Azure portal and switches to your tenant.
583+
584+
The guest user still has the Co-Administrator role assignment.
585+
586+
**Solution**
587+
588+
Don't use the classic subscription administrator roles. Microsoft recommends that you manage access to Azure resources using Azure RBAC. For more information, see [Assign Azure roles using the Azure portal](role-assignments-portal.md) and [Add or change Azure subscription administrators](../cost-management-billing/manage/add-change-subscription-administrator.md).
577589

578590
## Next steps
579591

0 commit comments

Comments
 (0)