azure role : owner, global administrator AAD

Question

If i have a user 1, user 2 as a AAD Global administrator, the user 1 create a new domain,the subscription owner and the user 2 can see the new domain?

i start from this question to more understand the difference between AAD Global Administrator and the subscription owner

Thanks

Answer 1

Of course, they can't.

If you give a user the AAD Global Administrator role in an AAD tenant, he is the global admin in the only one tenant, never relate to other tenants, in your case, the new tenant created by user 1.

For the subscription, it is under a specific AAD tenant. The user need to be created/invited to the tenant, then you can add him as a subscription owner, in your case, if the subscription is under the old tenant, the subscription owner will not be able to see the new tenant. If your subscription is under the new tenant, of course the subscription owner can see the tenant.