← cd ~/compare
// compare · azure roles
Owner vs User Access Administrator
Two Azure built-in roles that are often confused, compared permission by permission.
In short: Owner has 1 actions. User Access Administrator has 3 actions. Assign the one with less access that still covers the job.
| Owner | User Access Administrator | |
|---|---|---|
| What Microsoft says | Grants full access to manage all resources, including the ability to assign roles in Azure RBAC. | Lets you manage user access to Azure resources. |
| Size | 1 actions | 3 actions |
Permissions only Owner lists (1)
*
Permissions only User Access Administrator lists (3)
*/readMicrosoft.Authorization/*Microsoft.Support/*
Azure roles use wildcards such as *, and NotActions take permissions away, so a role can cover an action without listing it. Check the role pages for the full picture.