Skip to content

Commit 2e2c379

Browse files
committed
updated permission-view-manage
1 parent 93a969b commit 2e2c379

File tree

1 file changed

+27
-12
lines changed

1 file changed

+27
-12
lines changed

articles/cost-management-billing/savings-plan/permission-view-manage.md

Lines changed: 27 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -8,14 +8,29 @@ ms.service: cost-management-billing
88
ms.subservice: savings-plan
99
ms.custom: ignite-2022
1010
ms.topic: how-to
11-
ms.date: 01/20/2023
11+
ms.date: 02/03/2023
1212
ms.author: banders
1313
---
1414

1515
# Permissions to view and manage Azure savings plans
1616

1717
This article explains how reservation permissions work and how users can view and manage Azure reservations in the Azure portal.
1818

19+
After you buy an Azure savings plan, with sufficient permissions, you can make the following types of changes to a savings plan:
20+
21+
- Change who has access to, and manage, a savings plan
22+
- Update savings plan name
23+
- Update savings plan scope
24+
- Change auto-renewal settings
25+
26+
Except for auto-renewal, none of the changes cause a new commercial transaction or change the end date of the savings plan.
27+
28+
You can't make the following types of changes after purchase:
29+
30+
- Hourly commitment
31+
- Term length
32+
- Billing frequency
33+
1934
## Who can manage a savings plan by default
2035

2136
By default, the following users can view and manage savings plans:
@@ -26,6 +41,17 @@ By default, the following users can view and manage savings plans:
2641

2742
The savings plan lifecycle is independent of an Azure subscription, so the savings plan isn't a resource under the Azure subscription. Instead, it's a tenant-level resource with its own Azure RBAC permission separate from subscriptions. Savings plans don't inherit permissions from subscriptions after the purchase.
2843

44+
## Grant access to individual reservations
45+
46+
Users who have owner access on the savings plan and billing administrators can delegate access management for an individual savings plan order in the Azure portal.
47+
48+
To allow other people to manage savings plans, you have two options:
49+
50+
- Delegate access management for an individual savings plan order by assigning the Owner role to a user at the resource scope of the savings plan order. If you want to give limited access, select a different role. For detailed steps, see [Assign Azure roles using the Azure portal](../../role-based-access-control/role-assignments-portal.md).
51+
- Add a user as billing administrator to an Enterprise Agreement or a Microsoft Customer Agreement:
52+
- For an Enterprise Agreement, add users with the Enterprise Administrator role to view and manage all savings plan orders that apply to the Enterprise Agreement. Users with the Enterprise Administrator (read only) role can only view the reservation. Department admins and account owners can't view reservations unless they're explicitly added to them using Access control (IAM). For more information, see [Manage Azure Enterprise roles](../manage/understand-ea-roles.md).
53+
- For a Microsoft Customer Agreement, users with the billing profile owner role or the billing profile contributor role can manage all savings plan purchases made using the billing profile. Billing profile readers and invoice managers can view all savings plans that are paid for with the billing profile. However, they can't make changes to savings plans. For more information, see [Billing profile roles and tasks](../manage/understand-mca-roles.md#billing-profile-roles-and-tasks).
54+
2955
## View and manage savings plans as a billing administrator
3056

3157
If you're a billing administrator, use following steps to view and manage all savings plans and savings plan transactions in the Azure portal:
@@ -63,17 +89,6 @@ After you have elevated access:
6389
1. Navigate to **All Services** > **Savings plans** to see all savings plans that are in the tenant.
6490
2. To make modifications to the savings plan, add yourself as an owner of the savings plan order using Access control (IAM).
6591

66-
## Grant access to individual reservations
67-
68-
Users who have owner access on the savings plan and billing administrators can delegate access management for an individual savings plan order in the Azure portal.
69-
70-
To allow other people to manage savings plans, you have two options:
71-
72-
- Delegate access management for an individual savings plan order by assigning the Owner role to a user at the resource scope of the savings plan order. If you want to give limited access, select a different role. For detailed steps, see [Assign Azure roles using the Azure portal](../../role-based-access-control/role-assignments-portal.md).
73-
- Add a user as billing administrator to an Enterprise Agreement or a Microsoft Customer Agreement:
74-
- For an Enterprise Agreement, add users with the Enterprise Administrator role to view and manage all savings plan orders that apply to the Enterprise Agreement. Users with the Enterprise Administrator (read only) role can only view the reservation. Department admins and account owners can't view reservations unless they're explicitly added to them using Access control (IAM). For more information, see [Manage Azure Enterprise roles](../manage/understand-ea-roles.md).
75-
- For a Microsoft Customer Agreement, users with the billing profile owner role or the billing profile contributor role can manage all savings plan purchases made using the billing profile. Billing profile readers and invoice managers can view all savings plans that are paid for with the billing profile. However, they can't make changes to savings plans. For more information, see [Billing profile roles and tasks](../manage/understand-mca-roles.md#billing-profile-roles-and-tasks).
76-
7792
## Next steps
7893

7994
- [Manage Azure savings plans](manage-savings-plan.md).

0 commit comments

Comments
 (0)