Why as a co-administrator of a subscription am I unable to edit the Active Directory

Question

A customer made me a co-administrator of his Azure subscription. However, I am unable to edit his Active Directory, ie add/edit users, create applications, etc.

Why can't I access that? I'm thinking perhaps the Subscription is owned by the AD and not the other way around.

What do each of the role levels in AD allow? There's

• Global Admin
• Billing Admin
• Service Admin
• User Admin
• Password Admin

Answer 1

The answer was that I needed to be set up as a Global Administrator in the Azure AD domain.