i'm the only user in my org azure account, but i am a member. i am shown as owner of subscription. but i'm not global admin. i cant add any internal users. how to fix?

Hello dean koch

Thank you for reaching out to Microsoft Q&A.

Why this happens: -

1. Azure RBAC roles (Owner, Contributor) apply to resources in a subscription.
2. Microsoft Entra ID roles (Global Administrator, User Administrator) apply to directory-level tasks like creating users or assigning roles.
3. Being a Subscription Owner ≠ Global Administrator. That’s why the new user button is greyed out.

Below are the resolution steps: -

Elevate Access and Assign Global Administrator

If you are the only admin and locked out of directory-level permissions:

1. Sign in to Azure Portal with your subscription Owner account.
2. Go to: Microsoft Entra ID → Properties → Access management for Azure resources Toggle Yes to elevate access. This gives you User Access Administrator at root scope temporarily.
3. Sign out and sign back in.
4. Navigate to: Microsoft Entra ID → Roles & administrators → Global Administrator → Assign yourself the Global Administrator role.
5. After assigning, you can create users under: Microsoft Entra ID → Users → + New user.

Microsoft Docs for your references:

https://learn.microsoft.com/en-us/azure/role-based-access-control/elevate-access-global-admin?tabs=azure-portal%2Centra-audit-logs

https://learn.microsoft.com/en-us/entra/fundamentals/how-to-create-delete-users

Please let us know if you need any further assistance.

Thanks

This is still an issue.

When I attempt this step: Go to: Microsoft Entra ID → Properties → Access management for Azure resources Toggle Yes

The Toggle is set at "no", and the toggle is grayed out, so I cannot toggle to yes.

Does this mean something more basic?