Final answer:
An Azure subscription can have only one account administrator, responsible for billing management. Multiple service administrators can be assigned, and Role-Based Access Control (RBAC) helps in finer-grained resource management.
Step-by-step explanation:
The correct answer to whether an Azure subscription can have multiple account administrators is b) False. Each Azure subscription can have only one account administrator. However, this does not mean that only one person can manage resources within an Azure subscription. Azure provides different roles for access control and resource management.
A key role is the Service Administrator, which is different from the account administrator. While there is only one account administrator, you can designate multiple service administrators. Additionally, Azure utilizes Role-Based Access Control (RBAC) to enable finer-grained access management. Through RBAC, you can assign users, groups, and services specific roles, such as contributor or reader, thereby giving them different levels of permissions to manage resources within the subscription.
It is important to understand that while the Service Administrator has significant privileges, including the ability to access all resources within the subscription, they do not have the ability to change the billing details of the subscription, a capability reserved for the account administrator.
Differentiating Account and Service Administrators
- Account Administrator: Manages subscription billing and can change the service administrator.
- Service Administrator: Manages service resources within the subscription but cannot change billing details.
Understanding the distinction between these roles and the permissions they grant is critical for effective Azure subscription management.