access to Cloud Device administration roll or Global Administration

Manny Agahi 0 Reputation points
2026-11-06T23:30:02.8333333+00:00

here is what AI' response , BUT HOW DOES THIS HELP ME . I disabled a device , now I cant enable it !!!

The access issue is caused by a permissions-scope mismatch rather than an Azure service problem. Being an Azure subscription Owner does not automatically grant Microsoft Entra directory roles such as Global Administrator or Cloud Device Administrator. Global Administrator is a tenant-wide directory role, while Cloud Device Administrator is a separate directory role with device-management permissions and can also be limited to an administrative unit. The evidence indicates this account does not currently have the required Microsoft Entra role assignment, or it is assigned only at a narrower scope, which is why the Global Administrator and Cloud Device Administrator capabilities are not available. Assigning these directory roles requires role-management privileges such as Privileged Role Administrator.

The access problem is due to role-scope mismatch, not a service outage. Microsoft documents that Azure subscription roles and Microsoft Entra directory roles are separate: being an Azure Owner does not grant Global Administrator or Cloud Device Administrator access. Global Administrator is a tenant-wide Entra role, while Cloud Device Administrator is a separate Entra role with limited device-management permissions and can also be scoped to an administrative unit. The documentation also shows that assigning these Entra roles requires role-management privileges such as Privileged Role Administrator.

So the evidence points to this account not currently having the required Microsoft Entra directory role assignment (or having it only at a narrower scope), which is why it can’t access the Global Administrator or Cloud Device Administrator capabilities.

Microsoft 365 and Office | Subscription, account, billing | For business | Other
0 comments No comments

2 answers

Sort by: Newest
  1. Heimerdinger 1,465 Reputation points Independent Advisor
    2026-11-07T10:58:59.0466667+00:00

    Hi #Manny Agahi,

    Thank you for posting your question in the Microsoft Q&A forum.      

    To help narrow down what is preventing you from accessing or managing the device, could you please clarify the following?

    1. What Microsoft subscription or license have you purchased or are currently using? For example, Microsoft 365 Business Premium, Microsoft 365 E3/E5, Azure subscription, Microsoft Entra ID P1/P2, or another subscription.
    2. When you try to sign in to the Microsoft Entra admin center or access the device, what exactly happens? Do you receive an error message, an access/permission warning, or are the device management options simply unavailable?
    3. Could you provide a screenshot of what you see when you try to sign in or re-enable the device? Please make sure to hide any personal information, email addresses, tenant IDs, or other sensitive information before posting the screenshot.

    If possible, please also let me know where you originally disabled the device, for example, Microsoft Entra admin center, Microsoft Intune admin center, or another portal.

    With this information, I can better understand whether the issue is related to the account being used to sign in, the subscription/licensing, the device state, or the permissions available to your account.

    Thank you again for your time and understanding. I really appreciate your patience, and I’m here to help. Looking forward to your response.                       

    Was this answer helpful?

    0 comments No comments

  2. Manny Agahi 0 Reputation points
    2026-11-06T23:40:52.62+00:00

    Non of the Privileged Roles are assign to anyone in this organization

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.