Merge pull request #108356 from bandersmsft/master

CM+B - Assign access ACM data and Download daily usage data updates

Author: American-Dipper

articles/cost-management-billing/costs/assign-access-acm-data.md

@@ -3,7 +3,7 @@ title: Assign access to Azure Cost Management data
 description: This article walks you though assigning permission to Azure Cost Management data for various access scopes.
 author: bandersmsft
 ms.author: banders
-ms.date: 02/11/2020
+ms.date: 03/19/2020
 ms.topic: conceptual
 ms.service: cost-management-billing
 ms.reviewer: adwise
@@ -12,9 +12,9 @@ ms.custom: secdec18
 
 # Assign access to Cost Management data
 
-For users with Azure Enterprise agreements, a combination of permissions granted in the Azure portal and the Enterprise (EA) portal define a user's level of access to Azure Cost Management data. For users with other Azure account types, defining a user's level of access to Cost Management data is simpler by using Azure role-based access control. This article walks you through assigning access to Cost Management data. After the combination of permissions is assigned, the user views data in Cost Management based the scope that they have access to and on the scope that they select in the Azure portal.
+For users with Azure Enterprise agreements, a combination of permissions granted in the Azure portal and the Enterprise (EA) portal define a user's level of access to Azure Cost Management data. For users with other Azure account types, defining a user's level of access to Cost Management data is simpler by using Azure role-based access control. This article walks you through assigning access to Cost Management data. After the combination of permissions is assigned, the user views data in Cost Management based on their access scope and on the scope that they select in the Azure portal.
 
-The scope that a user selects is used throughout Cost Management to provide data consolidation and to control access to cost information. When using scopes, users don't multi-select them. Instead, they select a larger scope that child scopes roll up to and then they filter-down to what they want to view. Data consolidation is important to understand because some people shouldn't have access to a parent scope that child scopes roll up to.
+The scope that a user selects is used throughout Cost Management to provide data consolidation and to control access to cost information. When using scopes, users don't multi-select them. Instead, they select a larger scope that child scopes roll up to and then they filter-down to what they want to view. Data consolidation is important to understand because some people shouldn't access a parent scope that child scopes roll up to.
 
 Watch the [How to assign access with Azure Cost Management](https://www.youtube.com/watch?v=J997ckmwTa8) video to learn about assigning access to view costs and charges with Azure role-based access control.
 
@@ -52,11 +52,26 @@ To view cost data for other Azure subscriptions, a user must have at least read
 
 Various scopes are available after partners onboard customers to a Microsoft Customer Agreement. CSP customers can then use Cost Management features when enabled by their CSP partner. For more information, see [Get started with Azure Cost Management for partners](get-started-partners.md).
 
+## Enable access to costs in the Azure portal
+
+The department scope requires the **Department admins can view charges** (DA view charges) option set to **On**. Configure the option in either the Azure portal or the EA portal. All other scopes require the **Account owners can view charges** (AO view charges) option set to **On**.
+
+To enable an option in the Azure portal:
+
+1. Sign in to the Azure portal at https://portal.azure.com with an enterprise administrator account.
+1. Select the **Cost Management + Billing** menu item.
+1. Select **Billing scopes** to view a list of available billing scopes and billing accounts.
+1. Select your **Billing Account** from the list of available billing accounts.
+1. Under **Settings**, select the **Policies** menu item and then configure the setting.  
+    ![Billing scope policies showing view charges options](./media/assign-access-acm-data/azure-portal-policies-view-charges.png)
+
+After the view charge options are enabled, most scopes also require role-based access control (RBAC) permission configuration in the Azure portal.
+
 ## Enable access to costs in the EA portal
 
-The department scope requires the **DA view charges** option **Enabled** in the EA portal. All other scopes require the **AO view charges** option **Enabled** in the EA portal.
+The department scope requires the **DA view charges** option **Enabled** in the EA portal. Configure the option in either the Azure portal or the EA portal. All other scopes require the **AO view charges** option **Enabled** in the EA portal.
 
-To enable an option:
+To enable an option in the EA portal:
 
 1. Sign in to the EA portal at [https://ea.azure.com](https://ea.azure.com) with an enterprise administrator account.
 2. Select **Manage** in the left pane.
@@ -67,36 +82,36 @@ After the view charge options are enabled, most scopes also require role-based a
 
 ## Enterprise administrator role
 
-By default, an enterprise administrator has access to the billing account (Enterprise Agreement/enrollment) and to all other scopes, which are child scopes. The enterprise administrator assigns access to scopes for other users. As a best practice for business continuity, you should always have two users with enterprise administrator access. The following sections are walk-through examples of the enterprise administrator assigning access to scopes for other users.
+By default, an enterprise administrator can access the billing account (Enterprise Agreement/enrollment) and all other scopes, which are child scopes. The enterprise administrator assigns access to scopes for other users. As a best practice for business continuity, you should always have two users with enterprise administrator access. The following sections are walk-through examples of the enterprise administrator assigning access to scopes for other users.
 
 ## Assign billing account scope access
 
-Access to the billing account scope requires enterprise administrator permission in the EA portal. The enterprise administrator has access to view costs across the entire EA enrollment or multiple enrollments. No action is required in the Azure portal for the billing account scope.
+Access to the billing account scope requires enterprise administrator permission in the EA portal. The enterprise administrator can view costs across the entire EA enrollment or multiple enrollments. No action is required in the Azure portal for the billing account scope.
 
 1. Sign in to the EA portal at [https://ea.azure.com](https://ea.azure.com) with an enterprise administrator account.
 2. Select **Manage** in the left pane.
 3. On the **Enrollment** tab, select the enrollment that you want to manage.  
     ![select your enrollment in the EA portal](./media/assign-access-acm-data/ea-portal.png)
-4. Click **+ Add Administrator**.
+4. Select **+ Add Administrator**.
 5. In the Add Administrator box, select the authentication type and type the user's email address.
 6. If the user should have read-only access to cost and usage data, under **Read-only**, select **Yes**.  Otherwise, select **No**.
-7. Click **Add** to create the account.  
+7. Select **Add** to create the account.  
     ![example information shown in the Add administrator box](./media/assign-access-acm-data/add-admin.png)
 
 It may take up to 30 minutes before the new user can access data in Cost Management.
 
 ### Assign department scope access
 
-Access to the department scope requires department administrator (DA view charges) access in the EA portal. The department administrator has access to view costs and usage data associated with a department or to multiple departments. Data for the department includes all subscriptions belonging to an enrollment account that are linked to the department. No action is required in the Azure portal.
+Access to the department scope requires department administrator (DA view charges) access in the EA portal. The department administrator can view costs and usage data associated with a department or to multiple departments. Data for the department includes all subscriptions belonging to an enrollment account that are linked to the department. No action is required in the Azure portal.
 
 1. Sign in to the EA portal at [https://ea.azure.com](https://ea.azure.com) with an enterprise administrator account.
 2. Select **Manage** in the left pane.
 3. On the **Enrollment** tab, select the enrollment that you want to manage.
-4. Click the **Department** tab and then click **Add Administrator**.
+4. Select the **Department** tab and then select **Add Administrator**.
 5. In the Add Department Administrator box, select the authentication type and then type the user's email address.
 6. If the user should have read-only access to cost and usage data, under **Read-only**, select **Yes**.  Otherwise, select **No**.
 7. Select the departments that you want to grant department administrative permission to.
-8. Click **Add** to create the account.  
+8. Select **Add** to create the account.  
     ![enter required information in the Add department administrator box](./media/assign-access-acm-data/add-depart-admin.png)
 
 ## Assign enrollment account scope access
@@ -106,11 +121,11 @@ Access to the enrollment account scope requires account owner (AO view charges)
 1. Sign in to the EA portal at [https://ea.azure.com](https://ea.azure.com) with an enterprise administrator account.
 2. Select **Manage** in the left pane.
 3. On the **Enrollment** tab, select the enrollment that you want to manage.
-4. Click the **Account** tab and then click **Add Account**.
+4. Select the **Account** tab and then select **Add Account**.
 5. In the Add Account box, select the **Department** to associate the account to, or leave it as unassigned.
 6. Select the authentication type and type the account name.
 7. Type the user's email address and then optionally type the cost center.
-8. Click on **Add** to create the account.  
+8. Select on **Add** to create the account.  
     ![enter required information in the Add account box for an enrollment account](./media/assign-access-acm-data/add-account.png)
 
 After completing the steps above, the user account becomes an enrollment account in the Enterprise portal and can create subscriptions. The user can access cost and usage data for subscriptions that they create.
@@ -122,13 +137,13 @@ Access to view the management group scope requires at least the Cost Management
 1. Sign in to the Azure portal at [https://portal.azure.com](https://portal.azure.com).
 2. Select **All Services** in the sidebar, search for _management groups_, then select **management groups**.
 3. Select the management group in the hierarchy.
-4. Next to the name of your management group, click **Details**.
+4. Next to the name of your management group, select **Details**.
 5. Select **Access Control (IAM)** from the left pane.
-6. Click **Add**.
+6. Select **Add**.
 7. Under **Role**, select **Cost Management Reader**.
 8. Under **Assign access to**, select **Azure AD user, group, or application**.
 9. To assign access, search for and then select the user.
-10. Click **Save**.  
+10. Select **Save**.  
     ![example information in the Add permissions box for a management group](./media/assign-access-acm-data/add-permissions.png)
 
 ## Assign subscription scope access
@@ -139,11 +154,11 @@ Access to a subscription requires at least the Cost Management Reader (or Reader
 2. Select **All Services** in the sidebar, search for _subscriptions_, then select **Subscriptions**.
 3. Select your subscription.
 4. Select **Access Control (IAM)** from the left pane.
-5. Click **Add**.
+5. Select **Add**.
 6. Under **Role**, select **Cost Management Reader**.
 7. Under **Assign access to**, select **Azure AD user, group, or application**.
 8. To assign access, search for and then select the user.
-9. Click **Save**.
+9. Select **Save**.
 
 ## Assign resource group scope access
 
@@ -153,11 +168,11 @@ Access to a resource group requires at least the Cost Management Reader (or Read
 2. Select **All Services** in the sidebar, search for _resource groups_, then select **Resource groups**.
 3. Select your resource group.
 4. Select **Access Control (IAM)** from the left pane.
-5. Click **Add**.
+5. Select **Add**.
 6. Under **Role**, select **Cost Management Reader**.
 7. Under **Assign access to**, select **Azure AD user, group, or application**.
 8. To assign access, search for and then select the user.
-9. Click **Save**.
+9. Select **Save**.
 
 ## Cross-tenant authentication issues
 

articles/cost-management-billing/costs/media/assign-access-acm-data/azure-portal-policies-view-charges.png

@@ -7,7 +7,7 @@ ms.author: banders
 tags: billing
 ms.service: cost-management-billing
 ms.topic: conceptual
-ms.date: 02/13/2020
+ms.date: 03/19/2020
 ---
 
 # View and download your Azure usage and charges
@@ -16,30 +16,31 @@ You can download a daily breakdown of your Azure usage and charges in the Azure
 
 If you have a Microsoft Customer Agreement (MCA), you must be a billing profile Owner, Contributor, Reader, or Invoice manager to view your Azure usage and charges.  If you have a Microsoft Partner Agreement (MPA), only the Global Admin and Admin Agent role in the partner organization Microsoft can view and download Azure usage and charges. [Check your billing account type in the Azure portal](#check-your-billing-account-type).
 
+Based on the type of subscription that you use, options to download your usage and charges vary. 
+
 ## Download usage from the Azure portal (.csv)
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
-1. Search for *Cost Management + Billing*.
-
+1. Search for *Cost Management + Billing*.  
     ![Screenshot that shows Azure portal search](./media/download-azure-daily-usage/portal-cm-billing-search.png)
-
 1. Depending on your access, you might need to select a Billing account or Billing profile.
 1. In the left menu, select **Invoices** under **Billing**.
 1. In the invoice grid, find the row of the billing period corresponding to the usage you want to download.
-1. Select the **download icon** or the ellipsis (`...`) on the right.
-1. The Download pane opens on the right. Select **Download** from the **Usage Details** section.
+1. Select the **download icon** or the ellipsis (`...`) on the right.  
+  ![Screenshot showing Usage + charges download location](./media/download-azure-daily-usage/download-usage-others.png)  
+1. The Download pane opens on the right. Select **Download** from the **Usage Details** section.  
+
 
 ## Download usage for EA customers
 
 To view and download usage data as a EA customer, you must be an Enterprise Administrator, Account Owner, or Department Admin with the view charges policy enabled.
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
-1. Search for *Cost Management + Billing*.
-
+1. Search for *Cost Management + Billing*.  
     ![Screenshot that shows Azure portal search](./media/download-azure-daily-usage/portal-cm-billing-search.png)
-
 1. Select **Usage + charges**.
-1. For the month you want to download, select **Download**.
+1. For the month you want to download, select **Download**.  
+    ![Screenshot showing Usage + charges download location](./media/download-azure-daily-usage/download-usage-ea.png)
 
 ## Download usage for pending charges