Not able to give Defender for Storage Scanner Operator permission for subscription. it used to work 4 days back

Question

Not able to give Defender for Storage Scanner Operator permission for subscription. it used to work 4 days back

Ram Srivastava 0

Not able to give Defender for Storage Scanner Operator permission for subscription. it used to work 4 days back ( 27th Oct 2025). Now it is not working. it used be under "job function roles" now i see it under Privileged administrator roles but not letting me review and assign. Not sure what went wrong here User's image

2 answers

Your answer

Answer 1

Hi Ram,

Thank you for posting your query on Microsoft Q&A.

As per our understanding, you are unable to assign the Defender for Storage Scanner Operator permission for your subscription, and you noticed that the role has recently been moved from "Job Function Roles" to "Privileged Administrator Roles," whicAh is affecting your ability to assign it.

This behavior is due to recent updates in Azure Role-Based Access Control (RBAC) where some roles have been reclassified, impacting how they are managed and assigned. To assign this role, you need sufficient permissions such as Owner or User Access Administrator on the subscription.

Please follow these steps to resolve the issue:

Confirm Your Permissions: Ensure your account has the Owner or User Access Administrator role by navigating to: Azure Portal > Subscriptions > Your Subscription > Access control (IAM).

Locate the Role in the Updated Section: Search for the Defender for Storage Scanner Operator role under the Privileged Administrator Roles section in Access Control (IAM). Attempt to assign the role from this updated location.

Allow Time for Propagation: If you recently noticed this change or made permission changes, allow up to 24 hours for role visibility and assignment capabilities to update across Azure services.

Troubleshoot UI Issues: Clear your browser cache or try a different browser or incognito/private session to rule out any UI caching or session issues.

Monitor Official Documentation: Stay updated with the latest guidance from Microsoft on RBAC and Defender for Storage permissions:

I hope this information helps you assign the Defender for Storage Scanner Operator role correctly. Please feel free to ask if you need further assistance. If this answer is helpful, kindly click "Accept Answer" and Upvote it.

Answer 2

Ram Srivastava 0

again i see it in "Job function roles" My customers are very confused, why this kind of change within a week, User's image

Praveen Chivarla 2,005 Reputation points Microsoft External Staff Moderator

2025-11-10T10:05:59.62+00:00
Hi Ram,

Thank you for posting your query on Microsoft Q&A.

You reported difficulty assigning the Defender for Storage Scanner Operator role for your subscription, noting that it previously worked but recently the role seems to oscillate between being listed under Job Function Roles and Privileged Administrator Roles, causing confusion among customers.

Microsoft recently updated Azure Role-Based Access Control (RBAC), reclassifying some roles, including Defender for Storage Scanner Operator—between different role categories. This update affects how these roles are managed and assigned in the Azure portal, which can cause temporary inconsistencies in visibility or assignment capability.

Confirm Your Permissions Verify that your account has Owner or User Access Administrator permissions on the subscription via: Azure Portal > Subscriptions > Your Subscription > Access control (IAM)

Locate the Role in Both Role Categories Since the role appears intermittently under both Job Function Roles and Privileged Administrator Roles, check both sections when assigning the role.

Allow Time for Role Propagation These category changes may take up to 24-48 hours to fully propagate through Azure services. Temporary inconsistencies are expected during this period.

Try Alternate Browsers or Clear Cache UI caching or session issues may affect visibility; try another browser or use a private/incognito mode.

Stay Updated via Official Documentation Monitor the following resources for updates and changes in role management:

Azure RBAC overview

Microsoft Defender for Storage permissions

Troubleshoot Azure RBAC

I hope this clarifies the situation. Please feel free to ask if you need further help. If this answer helps, kindly click “Accept Answer” and Upvote it.

Share via

Not able to give Defender for Storage Scanner Operator permission for subscription. it used to work 4 days back

2 answers

Your answer