Cancel Azure

Popcorn Strategy 0 Reputation points

Subscription ID: <PII Removed>

IAM role: Owner

Billing Profile role: Owner

Azure portal shows My Role = Unknown and Offer ID = Unauthorized

Unable to create support request or cancel subscription

  1. Popcorn Strategy 0 Reputation points

    Subscription is Pay-As-You-Go.

    Subscription IAM role = Owner.

    Azure Portal shows My Role = Unknown.

    Offer ID, Currency, and Current Billing Period all show Unauthorized.

    Unable to create billing support request or cancel subscription despite Owner permissions.

  2. Suchitra Suregaunkar 14,595 Reputation points Microsoft External Staff Moderator

    Hello Popcorn Strategy It sounds like you’re running into a billing/offer cancellation problem where the portal isn’t recognizing your permissions (you see My Role = Unknown and Offer ID = Unauthorized), and you can’t open a billing support request or cancel a Pay-As-You-Go subscription even though you believe you have the Owner IAM role.

    Based on the provided documentation, here’s the most relevant path:

    Cancel Azure subscription / Azure plan when RBAC shows you as unauthorized:

    Microsoft has introduced functionality to cancel an Azure subscription / Azure plan even when RBAC permissions are no longer valid (for example, the access appears compromised or suspicious).

    Key points from the documentation:

    • This capability is available for Global Administrators and Admin Agent roles.
    • It is not dependent on RBAC permissions.
    • The feature was announced in Nov 2022 and expanded in Dec 2022 for partner center portal and API scenarios.
    • The documented steps reference Microsoft management guidance specifically for cancellation in this “without RBAC” scenario.

    What to try (public-portal forum style):

    1. Check whether the account you’re using is a Global Administrator or Admin Agent (not just an Azure subscription “Owner” via RBAC).
    2. Use the cancellation method described in the “Cancel Azure plan without RBAC” guidance, which is specifically designed for when the portal shows “Unauthorized” even though you intended to have access.
    3. If the portal UI can’t proceed with billing operations (support request/cancel), the doc implies you should still be able to use the cancellation path intended for the “RBAC removed/compromised” case.

    Why this can happen even when you’re “Owner”:

    The issue you described—portal showing My Role = Unknown and billing/offer fields showing Unauthorized—matches the “RBAC may no longer be reliable” scenario the “cancel without RBAC” documentation is meant to address.

    Also note: the “Owner” you mention is an Azure RBAC concept, but the “cancel without RBAC” mechanism depends on tenant admin roles (Global Administrator/Admin Agent), not RBAC roles on the subscription.

    Follow-up questions:

    1. Are you signing in as a Global Administrator or Admin Agent in Microsoft Entra ID (tenant), or only as an Azure subscription RBAC Owner?
    2. Is the subscription definitely Pay-As-You-Go, and is there any indication of compromised/suspicious activity?
    3. Are you able to open any support request from the Azure portal, or is it blocked only for billing/cancellation flows?
    4. Are you using Partner Center-based cancellation/API, or only the Azure portal UI?
    5. Approximately when did the “My Role = Unknown / Offer ID = Unauthorized” behavior start after the role assignment or tenant access change?

    References :

    Thanks,

    Suchitra.

  3. Popcorn Strategy 0 Reputation points

    Thank you for looking into this.

    1. I have confirmed that I am an Azure subscription RBAC Owner. Under Subscription → Access Control (IAM), my account shows Role = Owner and Type = User.
    2. I have not been able to verify whether I am a Global Administrator in Microsoft Entra ID. When I attempt to access Entra ID, the Microsoft Entra ID option appears grayed out.
    3. The subscription appears to be a Pay-As-You-Go subscription. The subscription overview shows "Offer: Pay-As-You-Go." I have no indication of compromised or suspicious activity. My goal is simply to cancel the subscription.
    4. I am unable to create support requests related to billing/cancellation because the portal reports that I do not have the required permissions.
    5. I am only using the Azure Portal UI. I am not using Partner Center, Partner Center APIs, or any other cancellation method.
    6. I do not know when the "My Role = Unknown" / "Offer ID = Unauthorized" behavior started. I only discovered it when attempting to cancel the subscription and create a support request. The subscription is approximately 8 years old and I am not aware of any recent tenant access changes or role assignment changes.

    Additional information:

    • Under Subscription → Access Control (IAM), my account is assigned the Owner role.
    • Under Cost Management + Billing → Access Control (IAM), my account is also assigned the Owner role.
    • Despite this, the subscription overview shows:
      • My Role = Unknown
        • Offer ID = Unauthorized
          • Current Billing Period = Unauthorized
            • Currency = Unauthorized
            • The subscription status shows Active.

    Given that I am listed as Owner at both the subscription and billing scopes, but Azure still reports Unknown/Unauthorized and blocks support requests and cancellation, can you determine whether the subscription's Account Administrator, Billing Account Owner, support entitlement, or billing ownership record differs from or is disconnected from the account currently assigned as Owner?

    This appears to be a mismatch between the visible role assignments and the permissions being recognized by the billing/support systems.Thank you for looking into this.

    1. I have confirmed that I am an Azure subscription RBAC Owner. Under Subscription → Access Control (IAM), my account shows Role = Owner and Type = User.
    2. I have not been able to verify whether I am a Global Administrator in Microsoft Entra ID. When I attempt to access Entra ID, the Microsoft Entra ID option appears grayed out.
    3. The subscription appears to be a Pay-As-You-Go subscription. The subscription overview shows "Offer: Pay-As-You-Go." I have no indication of compromised or suspicious activity. My goal is simply to cancel the subscription.
    4. I am unable to create support requests related to billing/cancellation because the portal reports that I do not have the required permissions.
    5. I am only using the Azure Portal UI. I am not using Partner Center, Partner Center APIs, or any other cancellation method.
    6. I do not know when the "My Role = Unknown" / "Offer ID = Unauthorized" behavior started. I only discovered it when attempting to cancel the subscription and create a support request. The subscription is approximately 8 years old and I am not aware of any recent tenant access changes or role assignment changes.

    Additional information:

    • Under Subscription → Access Control (IAM), my account is assigned the Owner role.
    • Under Cost Management + Billing → Access Control (IAM), my account is also assigned the Owner role.
    • Despite this, the subscription overview shows:
      • My Role = Unknown
        • Offer ID = Unauthorized
          • Current Billing Period = Unauthorized
            • Currency = Unauthorized
            • The subscription status shows Active.

    Given that I am listed as Owner at both the subscription and billing scopes, but Azure still reports Unknown/Unauthorized and blocks support requests and cancellation, can you determine whether the subscription's Account Administrator, Billing Account Owner, support entitlement, or billing ownership record differs from or is disconnected from the account currently assigned as Owner?

    This appears to be a mismatch between the visible role assignments and the permissions being recognized by the billing/support systems.


Sign in to comment

1 answer

  1. Popcorn Strategy 0 Reputation points

    I'm still looking for help with this, can anyone help me?

    0 comments No comments

    Sign in to comment
Sign in to answer

Your answer