Removing root role assignments in Azure using PowerShell

Here’s today’s scenario: You are managing your role-based access control (RBAC) roles in the Azure Portal and start getting the following error message: “Role assignments created at root scope must be removed by using the command line.” Now what?

root role assignments

The solution can be easily accomplished by using Cloud Shell. Use PowerShell mode, and we will use the Remove-AZRoleAssignment cmdlet. The syntax of the cmdlet is listed below. Just replace the username and the role definition name to match your requirement.

Remove-AZRoleAssignment -SignInName <[email protected]> -RoleDefinitionName "User Access Administrator" -Scope "/"

root role assignments
Nice and easy!

Leave a Comment

Your email address will not be published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top