A company wants to transfer an existing Azure subscription from one management group to another. Which of the following conditions must be met to successfully move the subscription?
- AThe user performing the move must have the 'Owner' role on both the source and destination management groups.
- BThe user performing the move must have the 'Owner' role on the subscription being moved.
- CThe user performing the move must have the 'Contributor' role on the subscription and the 'Owner' role on the destination management group.
- DThe user performing the move must have the 'Owner' role on the subscription AND the 'Contributor' or 'Owner' role on the destination management group.
Show answer & explanationAnswer & explanation
Correct answer: D. The user performing the move must have the 'Owner' role on the subscription AND the 'Contributor' or 'Owner' role on the destination management group.
To move an Azure subscription, the user needs the 'Owner' role on the subscription itself. Additionally, they need at least the 'Contributor' role (or 'Owner') on the destination management group to place the subscription there, and the 'Contributor' role (or 'Owner') on the source management group if the subscription is already under one.
Why the other options are wrong
- A. This is too restrictive; 'Owner' on the subscription and 'Contributor'/'Owner' on destination is sufficient.
- B. This is incomplete; permissions are also needed on the destination management group.
- C. Contributor on the subscription is insufficient; 'Owner' is required for moving subscriptions.
Azure Subscription Move Permissions
The specific Azure RBAC roles required for a user to successfully move an Azure subscription between management groups. It involves permissions on the subscription itself and on the target management group.
- Owner role on the subscription to be moved
- Contributor or Owner role on the destination management group
- Contributor or Owner role on the source management group (if applicable)
Memory trick: To move your subscription 'box', you need to own the box AND have permission to put it in the new house.