Skip to content

Commit 05fe43c

Browse files
committed
added AAD consent script
1 parent dab3888 commit 05fe43c

File tree

2 files changed

+30
-5
lines changed

2 files changed

+30
-5
lines changed

articles/cost-management/activate-subs-accounts.md

Lines changed: 28 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: cost-management
55
keywords:
66
author: bandersmsft
77
ms.author: banders
8-
ms.date: 04/26/2018
8+
ms.date: 05/31/2018
99
ms.topic: quickstart
1010
ms.service: cost-management
1111
manager: dougeby
@@ -92,15 +92,40 @@ Here's how to fix the problems:
9292
1. Your reseller needs to enable _markup_ for your account. For instructions, see the [Indirect Customer Onboarding Guide](https://ea.azure.com/api/v3Help/v2IndirectCustomerOnboardingGuide).
9393
2. You generate the Azure Enterprise Agreement key for use with Azure Cost Management. For instructions, see [Register an Azure Enterprise Agreement and view cost data](https://docs.microsoft.com/azure/cost-management/quick-register-ea).
9494

95-
Only an Azure service administrator can enable Cost Management. Co-administrator permissions are insufficient.
96-
9795
Before you can generate the Azure Enterprise Agreement API key to set up Azure Cost Management, you must enable the Azure Billing API by following the instructions at:
9896

9997
- [Overview of Reporting APIs for Enterprise customers](../billing/billing-enterprise-api.md)
10098
- [Microsoft Azure enterprise portal Reporting API](https://ea.azure.com/helpdocs/reportingAPI) under **Enabling data access to the API**
10199

102100
You also might need to give department administrators, account owners, and enterprise administrators permissions to _view charges_ with the Billing API.
103101

102+
Only an Azure service administrator can enable Cost Management. Co-administrator permissions are insufficient. However, you can work around the administrator requirement. You can request that your Azure Active Directory administrator grant permission to authorize the **CloudynAzureCollector** with a PowerShell script. The following script grants permission to register the Azure Active Directory Service Principal **CloudynAzureCollector**.
103+
104+
```
105+
#THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
106+
107+
#Tenant - enter your tenant ID or Name
108+
$tenant = "<ReplaceWithYourTenantID>"
109+
110+
#Cloudyn Collector application ID
111+
$appId = "83e638ef-7885-479f-bbe8-9150acccdb3d"
112+
113+
#URL to activate the consent screen
114+
$url = "https://login.windows.net/"+$tenant+"/oauth2/authorize?api-version=1&response_type=code&client_id="+$appId+"&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2FCloudynJava&prompt=consent"
115+
116+
#Choose your browser, the default is Internet Explorer
117+
118+
#Chrome
119+
#[System.Diagnostics.Process]::Start("chrome.exe", "--incognito $url")
120+
121+
#Firefox
122+
#[System.Diagnostics.Process]::Start("firefox.exe","-private-window $url" )
123+
124+
#IExplorer
125+
[System.Diagnostics.Process]::Start("iexplore.exe","$url -private" )
126+
127+
```
128+
104129
## Next steps
105130

106131
- If you haven't already completed the first tutorial for Cost Management, read it at [Review usage and costs](tutorial-review-usage.md).

articles/cost-management/tutorial-user-access.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ When you delete a user, any entities that the user has access to remain intact.
7070

7171
## Delete or export personal data
7272

73-
If you want to delete or export personal data from Cloudyn, you need to create a support ticket. When the support ticket is created, it acts as formal request - a Data Subject Request. Microsoft then takes prompt action to remove the account and delete any customer or personal data. To learn about how you can request to have your data deleted or exported, see [Cloudyn GDPR requests](https://www.cloudyn.com/cloudyn-gdpr-requests).
73+
If you want to delete or export personal data from Cloudyn, you need to create a support ticket. When the support ticket is created, it acts as formal request - a Data Subject Request. Microsoft then takes prompt action to remove the account and delete any customer or personal data. To learn about how you can request to have your data deleted or exported, see [Data Subject Requests of Cloudyn Data](https://www.cloudyn.com/cloudyn-gdpr-requests).
7474

7575
## Create and manage entities
7676

@@ -120,7 +120,7 @@ In this tutorial, you learned how to:
120120
> * Create a user with admin access
121121
> * Create a user with user access
122122
> * Delete a user
123-
> * Delete or export personal data
123+
> * Delete or export personal data
124124
> * Create and manage entities
125125
126126

0 commit comments

Comments
 (0)