0
votes

Last time I checked, a month ago there were 3 "Free Trial" Subscriptions in company's Azure AD. I was only able to see them once I elevated myself from Global Administrator to User Access Administrator. Now there are 6 "Free Trial" Subscriptions, 3 more than before.

  • How were these Subscriptions created? Did somebody sign up for Free Trial using company's mail, so that Free Trial got added into company's Azure AD?
  • How can I find out who created the subscriptions?
  • None of the subscriptions have Role assignments in Access control (IAM), yet all of them have Classic administrators. Is this normal?
  • Should we be concerned about this situation?
1

1 Answers

1
votes
  • How were these Subscriptions created? Did somebody sign up for Free Trial using company's mail, so that Free Trial got added into company's Azure AD?

If you use the work account(company email)to register Azure free subscription, it will be automatically associated with the tenant which contains the account

  • How can I find out who created the subscriptions?

As far as I know, regarding the Azure free subscriptions, the account that is used to create subscriptions is automatically set as both the Account Administrator and Service Administrator. For more details, please refer to the document

  • None of the subscriptions have Role assignments in Access control (IAM), yet all of them have Classic administrators. Is this normal? Should we be concerned about this situation?

We can use Classic subscription administrators to manage who can access Azure subscription and resources. The classic subscription administrator role is relatively simple. We can't control permissions precisely. For more details, please refer to the document.