Merge pull request #110205 from JnHs/jh-lh-amalh

managed application comparison

Author: megvanhuygen

articles/lighthouse/concepts/managed-applications.md

@@ -0,0 +1,45 @@
+---
+title: Azure Lighthouse and Azure managed applications
+description: Azure Lighthouse and Azure managed applications ... 
+ms.date: 05/01/2020
+ms.topic: conceptual
+---
+
+# Azure Lighthouse and Azure managed applications
+
+Both Azure managed applications and Azure Lighthouse work by enabling a service provider to access resources that reside in the customer's tenant. It can be helpful to understand the differences in the way that they work and the scenarios that they help to enable, as well as how they can be used together.
+
+## Comparing Azure Lighthouse and Azure managed applications
+
+### Azure Lighthouse
+
+With [Azure Lighthouse](../overview.md), a service provider to perform a wide range of management tasks directly on a customer's subscription (or resource group). This access is achieved through a logical projection, allowing service providers to sign in to their own tenant and access resources that belong to the customer's tenant. The customer can determine which subscriptions or resource groups to delegate to the service provider, and the customer maintains full access to those resources. They can also remove the service provider's access at any time.
+
+To use Azure Lighthouse, customers are onboarded for [Azure delegated resource management](azure-delegated-resource-management.md) either by [deploying ARM templates](../how-to/onboard-customer.md) or through a [Managed Service offer in  Azure Marketplace](managed-services-offers.md). You can track your impact on customer engagements by [linking your partner ID](../../cost-management-billing/manage/link-partner-id.md).
+
+Azure Lighthouse is typically used when a service provider will perform management tasks for a customer on an ongoing basis.
+
+### Azure managed applications
+
+[Azure managed applications](../../azure-resource-manager/managed-applications/overview.md) allow a service provider or ISV to offer cloud solutions that are easy for customers to deploy and use in their own subscriptions.
+
+In a managed application, the resources used by the application are bundled together and deployed to a resource group that's managed by the publisher. This resource group is present in the customer's subscription, but an identity in the publisher's tenant has access to it. The ISV continues to manage and maintain the managed application, while the customer does not have direct access to work in its resource group, or any access to its resources.
+
+Managed applications support [customized Azure portal experiences](../../azure-resource-manager/managed-applications/concepts-view-definition.md) and [integration with custom providers](../../azure-resource-manager/managed-applications/tutorial-create-managed-app-with-custom-provider.md). These options can be used to deliver a more customized and integrated experience, making it easier for customers to perform some management tasks themselves.
+
+Managed applications can be [published to Azure Marketplace](../../azure-resource-manager/managed-applications/publish-marketplace-app.md), either as a private offer for a specific customer's use, or as public offers that multiple customers can purchase. They can also be delivered to users within your organization by [publishing managed applications to your service catalog](../../azure-resource-manager/managed-applications/publish-service-catalog-app.md). You can deploy both service catalog and Marketplace instances using ARM templates, which can include a Commercial Marketplace partner's unique identifier to track [customer usage attribution](../../marketplace/azure-partner-customer-usage-attribution.md).
+
+Azure managed applications are typically used for a specific customer need that can be achieved through a turnkey solution that is fully managed by the service provider.
+
+## Using Azure Lighthouse and Azure managed applications together
+
+While Azure Lighthouse and Azure managed applications use different access mechanisms to achieve different goals, there may be scenarios where it makes sense for a service provider to use both of them with the same customer.
+
+For example, a customer might want managed services delivered by a service provider through Azure Lighthouse, so that they have visibility into the partner's actions along with continued control of their delegated subscription. However, the service provider may not want the customer to access certain resources that will be stored in the customer's tenant, or allow any customized actions on those resources. To meet these goals, the service provider can publish a private offer as a managed application. The managed application can include a resource group that is deployed in the customer's tenant, but that can't be accessed directly by the customer.
+
+Customers might also be interested in managed applications from multiple service providers, whether or not they also use managed services via Azure Lighthouse from any of those service providers. Additionally, partners in the Cloud Solution Provider (CSP) program can resell certain managed applications published by other ISVs to customers that they support through Azure Lighthouse. With a wide range of options, service providers can choose the right balance to meet their customers' needs while restricting access to resources when appropriate.
+
+## Next steps
+
+- Learn about [Azure managed applications](../../azure-resource-manager/managed-applications/overview.md).
+- Learn how to [onboard a subscription to Azure delegated resource management](../how-to/onboard-customer.md).

articles/lighthouse/overview.md

@@ -1,7 +1,7 @@
 ---
 title: What is Azure Lighthouse?
 description: Azure Lighthouse lets service providers deliver managed services for their customers with higher automation and efficiency at scale.
-ms.date: 04/23/2020
+ms.date: 04/30/2020
 ms.topic: overview
 ---
 # What is Azure Lighthouse?
@@ -16,7 +16,7 @@ Azure Lighthouse helps you to profitably and efficiently build and deliver manag
 
 - **Management at scale**: Customer engagement and life-cycle operations to manage customer resources are easier and more scalable.
 - **Greater visibility and precision for customers**: Customers will have greater visibility into your actions and precise control over the scope they delegate for management, including the ability to remove access completely, while your IP is preserved.
-- **Comprehensive and unified platform tooling**: Our tooling experience addresses key service provider scenarios, including multiple licensing models such as EA, CSP and pay-as-you-go. The new capabilities work with existing tools and APIs, licensing models, and partner programs such as the [Cloud Solution Provider program (CSP)](https://docs.microsoft.com/partner-center/csp-overview). The Azure Lighthouse options you choose can be integrated into your existing workflows and applications, and you can track your impact on customer engagements by [linking your partner ID](../billing/billing-partner-admin-link-started.md).
+- **Comprehensive and unified platform tooling**: Our tooling experience addresses key service provider scenarios, including multiple licensing models such as EA, CSP and pay-as-you-go. The new capabilities work with existing tools and APIs, licensing models, and partner programs such as the [Cloud Solution Provider program (CSP)](https://docs.microsoft.com/partner-center/csp-overview). Azure Lighthouse can be integrated into your existing workflows and applications, and you can track your impact on customer engagements by [linking your partner ID](../billing/billing-partner-admin-link-started.md).
 
 There are no additional costs associated with using Azure Lighthouse to manage your customers' Azure resources.
 
@@ -28,7 +28,6 @@ Azure Lighthouse includes multiple ways to help streamline customer engagement a
 - **New Azure portal experiences**: View cross-tenant info in the new **My customers** page in the [Azure portal](https://portal.azure.com). A corresponding **Service providers** blade lets your customers view and manage service provider access. For more info, see [View and manage customers](./how-to/view-manage-customers.md) and [View and manage service providers](how-to/view-manage-service-providers.md).
 - **Azure Resource Manager templates**: Perform management tasks more easily, including onboarding customers for Azure delegated resource management. For more info, see our [samples repo](https://github.com/Azure/Azure-Lighthouse-samples/tree/master/templates) and [Onboard a customer to Azure delegated resource management](how-to/onboard-customer.md).
 - **Managed Services offers in Azure Marketplace**: Offer your services to customers through private or public offers, and have them automatically onboarded to Azure delegated resource management, as an alternate to onboarding using Azure Resource Manager templates. For more info, see [Managed services offers in Azure Marketplace](concepts/managed-services-offers.md).
-- **Azure managed applications**: Package and ship applications that are easy for your customers to deploy and use in their own subscriptions. The application is deployed into a resource group that you access from your tenant, letting you manage the service as part of the overall Azure Lighthouse experience. For more info, see [Azure managed applications overview](../azure-resource-manager/managed-applications/overview.md).
 
 ## Next steps
 

articles/lighthouse/toc.yml

@@ -36,6 +36,9 @@
   - name: Azure Lighthouse in enterprise scenarios
     displayName: corporation, IT, consolidate
     href: ./concepts/enterprise.md
+  - name: Azure Lighthouse and Azure managed applications 
+    displayName: managed apps, ama
+    href: ./concepts/managed-applications.md
 - name: How-to guides
   items:
   - name: Onboard a customer to Azure delegated resource management