Skip to content

Commit 859b924

Browse files
Merge pull request #232267 from bandersmsft/ghissue-106656
MCM - Update for ghissue 106656 - programmatically-create
2 parents 3f911d1 + 4872e73 commit 859b924

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

articles/cost-management-billing/manage/programmatically-create-subscription-enterprise-agreement.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: bandersmsft
55
ms.service: cost-management-billing
66
ms.subservice: billing
77
ms.topic: how-to
8-
ms.date: 06/06/2022
8+
ms.date: 03/27/2023
99
ms.reviewer: sapnakeshari
1010
ms.author: banders
1111
ms.custom: devx-track-azurepowershell, devx-track-azurecli
@@ -30,7 +30,7 @@ A user must have an Owner role on an Enrollment Account to create a subscription
3030

3131
To use a service principal (SPN) to create an EA subscription, an Owner of the Enrollment Account must [grant that service principal the ability to create subscriptions](/rest/api/billing/2019-10-01-preview/enrollmentaccountroleassignments/put).
3232

33-
When using an SPN to create subscriptions, use the ObjectId of the Azure AD Application Registration as the Service Principal ObjectId using [Azure Active Directory PowerShell](/powershell/module/azuread/get-azureadserviceprincipal?view=azureadps-2.0&preserve-view=true ) or [Azure CLI](/cli/azure/ad/sp#az-ad-sp-list). You can also use the steps at [Find your SPN and tenant ID](assign-roles-azure-service-principals.md#find-your-spn-and-tenant-id) to find the object ID in the Azure portal for an existing SPN.
33+
When using an SPN to create subscriptions, use the ObjectId of the Azure AD Enterprise application as the Service Principal ID using [Azure Active Directory PowerShell](/powershell/module/azuread/get-azureadserviceprincipal?view=azureadps-2.0&preserve-view=true ) or [Azure CLI](/cli/azure/ad/sp#az-ad-sp-list). You can also use the steps at [Find your SPN and tenant ID](assign-roles-azure-service-principals.md#find-your-spn-and-tenant-id) to find the object ID in the Azure portal for an existing SPN.
3434

3535
For more information about the EA role assignment API request, see [Assign roles to Azure Enterprise Agreement service principal names](assign-roles-azure-service-principals.md). The article includes a list of roles (and role definition IDs) that can be assigned to an SPN.
3636

articles/cost-management-billing/manage/programmatically-create-subscription-microsoft-customer-agreement.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: bandersmsft
55
ms.service: cost-management-billing
66
ms.subservice: billing
77
ms.topic: how-to
8-
ms.date: 11/30/2022
8+
ms.date: 03/27/2023
99
ms.reviewer: sgautam
1010
ms.author: banders
1111
ms.custom: devx-track-azurepowershell, devx-track-azurecli
@@ -27,7 +27,7 @@ When you create an Azure subscription programmatically, that subscription is gov
2727

2828
You must have an owner, contributor, or Azure subscription creator role on an invoice section or owner or contributor role on a billing profile or a billing account to create subscriptions. You can also give the same role to a service principal name (SPN). For more information about roles and assigning permission to them, see [Subscription billing roles and tasks](understand-mca-roles.md#subscription-billing-roles-and-tasks).
2929

30-
If you're using an SPN to create subscriptions, use the ObjectId of the Azure AD Application Registration as the Service Principal ObjectId using [Azure Active Directory PowerShell](/powershell/module/azuread/get-azureadserviceprincipal?view=azureadps-2.0&preserve-view=true) or [Azure CLI](/cli/azure/ad/sp#az-ad-sp-list).
30+
If you're using an SPN to create subscriptions, use the ObjectId of the Azure AD Enterprise application as the Principal ID using [Azure Active Directory PowerShell](/powershell/module/azuread/get-azureadserviceprincipal?view=azureadps-2.0&preserve-view=true) or [Azure CLI](/cli/azure/ad/sp#az-ad-sp-list).
3131

3232
> [!NOTE]
3333
> Permissions differ between the legacy API (api-version=2018-03-01-preview) and the latest API (api-version=2020-05-01). Although you may have a role sufficient to use the legacy API, you might need an EA admin to delegate you a role to use the latest API.

0 commit comments

Comments
 (0)