10.5.4. Assign a contributor role to an Azure account

The Azure account created in the previous step is not assigned a subscription role.
Assign the "Contributor"* role of your subscription to your Azure account to create and manage Azure resources.

Note

This operation needs to be performed with an account that has "Global Administrator" privileges in the Azure AD tenant.
For an Azure AD tenant created with Hybrid Cloud with Microsoft Azure, the initially created account (admin @ [Azure tenant name] .onmicrosoft.com) has Global Administrator privileges.

10.5.4.1. Get access control permissions for Azure resources

Temporarily gain access control permissions to assign roles to your Azure account.
Log in to the Azure portal and make the following settings.
  1. Open Azure Active Directory service

    Select [Azure Active Directory] from the list of Azure services.

    ../../_images/01_select_ad_menu1.png
  2. Setting properties

    Open the [Properties], set the access control of the Azure resource to "Yes" and [Save].

    ../../_images/02_save_property1.png
  3. Sign out

    You need to sign out once for the property settings to take effect.

    ../../_images/03_sign_out1.png

    Log back into the Azure portal and continue with the steps below.

10.5.4.2. Assign contributor roles

  1. Open subscription service

    Select [Subscription] from the list of Azure services.

    ../../_images/04_select_subscription_menu1.png
  2. Select subscriptions to assign roles

    Please select your subscription.
    ../../_images/05_select_subscription1.png
  3. Open role assignment screen

    Select [Access Control (IAM)] and press the [Add] button in the column to add a role assignment.

    ../../_images/06_open_add_role1.png
  4. Assign roles

    Select "Contributor" in the role selection, select a member and press the [Save] button.

    ../../_images/07_save_add_role1.png
  5. Check roles

    You can see that "Contributor" is assigned in the list of subscription services.
    The previous contents may be displayed depending on the screen transition method. Please try reloading.

    Warning

    Foreign Principal for 'NTT Communications Corp.' in Role 'TenantAdmins' (CSPcustomer Directory) to which the "Owner" permission for the subscription is assigned by default is required for service maintenance. Please never delete it.

    ../../_images/08_confirm_role1.png

10.5.4.3. Remove access control permissions for Azure resources

Assigning a "contributor" to an Azure account is now complete.
Release the access control permissions for Azure resources that you have temporarily acquired.
  1. Open Azure Active Directory service

    Select [Azure Active Directory] from the list of Azure services.

    ../../_images/09_select_ad_menu1.png
  2. Setting properties

    Open the [Properties], set the access control of the Azure resource to "No" and [Save].

    ../../_images/10_save_property1.png
  3. Sign out

    This completes the settings in this section. Please sign out and exit.

    ../../_images/11_sign_out1.png