Account Guide

Access restricted to authorised employees only

Account Guide

UBC Account Framework

Which account do you need?

Select your domain, answer a few questions, and we'll guide you straight to the right account for your task.

Guided scenario finder

Choose your domain Step 1 of 4

Quick reference

Account overview

U-Account

User Account

Your daily driver for all standard work tasks — no special privileges needed.

Used for

✓Office 365 (Outlook, Teams, Word)

✓Corporate laptop sign-in

✓Business apps (non-admin)

✓Azure read-only access

✓PIM activation (sensitive data)

B-Account

Admin Account

For IT admins managing on-premises infrastructure. Kept separate from daily use.

Used for

✓On-premises server management

✓Admin access to business apps

✓Data plane operations

✓Tiering Stepping Stones

✓PIM elevation (on-prem tasks)

C-Account

Cloud Admin Account

Dedicated to Azure Management Plane only. Never used for daily work.

Used for

✓Azure infrastructure management

✓Azure RBAC assignments

✓Resource groups, VMs, storage

✓Microsoft Admin Portal

✓DevOps infrastructure (PROD)

Key rules

💼

U-Account is your defaultOnly switch to B or C when your task specifically requires it.

🔒

Never mix accountsDon't use B- or C-Account for email, Teams, or daily work.

🧪

OTAM is differentAzure Management Plane requires a SmartAim request in OTAM.

Quick reference

Responsibility overview

UBC Account Framework — For questions, contact your IT department