title: Why as a co-administrator of a subscription am I unable to edit the Active Directory?
body: <p>A customer made me a co-administrator of his Azure subscription. However, I am unable to edit his Active Directory, ie add/edit users, create applications, etc.</p>
  
  <p>Why can't I access that? I'm thinking perhaps the Subscription is owned by the AD and not the other way around.</p>
  
  <p>What do each of the role levels in AD allow? There's</p>
  
  <ul>
  <li>Global Admin</li>
  <li>Billing Admin</li>
  <li>Service Admin</li>
  <li>User Admin</li>
  <li>Password Admin</li>
  </ul>