Windows Azure Co-Administrator

Windows Azure allows us to assign multiple co-administrators to manage the resources in our subscription. To access the screen in the new portal, simply click on the SETTINGS tab on the left-navigation bar and then click on ADMINISTRATORS.

On this page, we can actually view the Subscriptions and the associated Administrators. If you are an administrator for more than one subscription, you will be able to view them all here. You can add your co-administrators by clicking on +New. 

If your organization have people with different roles such as Infrastructure Engineers and Database Administrators (DBAs), I would recommend that you assign the rights in the following manner: 

• Assign Infrastructure Engineers as co-administrators and place the responsibility of managing the cloud resources (Services, Storage, Web Sites, Networks and etc.) on them. This responsibility should be similar to when they are managing on-premise resources.

• For SQL Databases (previously known as SQL Azure), the Infra personnel can create a Database Server and then create a SQL Administrator login for the DBAs. The configuration of firewall IP addresses and all that should be done by the Infra personnel (similar to on-premise) as well.

What about Developers? 

Generally, developers would have access to Windows Azure via their MSDN subscriptions (or trial subscriptions) to develop applications. It may also be wise to provide different Windows Azure subscription to developers for development and testing (if you don't have MSDN).

I do not think giving Developers direct access to a Production subscription is a good idea but of course it is entirely up to you :p