Skip to content

Commit b64a389

Browse files
authored
Merge pull request #92306 from JnHs/jh-subowner
link to how to find owner users
2 parents 167fbd7 + 97a2298 commit b64a389

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

articles/lighthouse/how-to/onboard-customer.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to onboard a customer to Azure delegated resource managem
44
author: JnHs
55
ms.author: jenhayes
66
ms.service: lighthouse
7-
ms.date: 09/30/2019
7+
ms.date: 10/17/2019
88
ms.topic: overview
99
manager: carmonm
1010
---
@@ -190,7 +190,8 @@ The last authorization in the example above adds a **principalId** with the User
190190
Once you have updated your parameter file, the customer must deploy the Resource Management template in their customer's tenant as a subscription-level deployment. A separate deployment is needed for each subscription that you want to onboard to Azure delegated resource management (or for each subscription that contains resource groups that you want to onboard).
191191

192192
> [!IMPORTANT]
193-
> The deployment must be done by a non-guest account in the customer’s tenant which has the [Owner built-in role](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#owner) for the subscription being onboarded (or which contains the resource groups that are being onboarded).
193+
> The deployment must be done by a non-guest account in the customer’s tenant which has the [Owner built-in role](https://docs.microsoft.com/azure/role-based-access-control/built-in-roles#owner) for the subscription being onboarded (or which contains the resource groups that are being onboarded). To see all users who can delegate the subscription, a user in the customer's tenant can select the subscription in the Azure portal, open **Access control (IAM)**, and [view all users with the Owner role](https://docs.microsoft.com/azure/role-based-access-control/role-assignments-portal#view-roles-and-permissions).
194+
194195

195196
```azurepowershell-interactive
196197
# Log in first with Connect-AzAccount if you're not using Cloud Shell

articles/lighthouse/how-to/publish-managed-services-offers.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to publish a managed service offer that onboards customer
44
author: JnHs
55
ms.author: jenhayes
66
ms.service: lighthouse
7-
ms.date: 09/19/2019
7+
ms.date: 10/17/2019
88
ms.topic: overview
99
manager: carmonm
1010
---
@@ -127,7 +127,7 @@ Once you're happy with all of the info you've provided, your next step is to pub
127127

128128
## The customer onboarding process
129129

130-
When a customer adds your offer, they will be able to [delegate one or more specific subscriptions or resource groups](view-manage-service-providers.md#delegate-resources) which will then be onboarded for Azure delegated resource management. If a customer has accepted an offer but has not yet delegated any resources, they'll see a note at the top of the **Provider offers** section of the [**Service providers**](view-manage-service-providers.md) page in the Azure portal.
130+
When a customer adds your offer, they will be able to [delegate one or more specific subscriptions or resource groups](view-manage-service-providers.md#delegate-resources) which will then be onboarded for Azure delegated resource management. If a customer has accepted an offer but has not yet delegated any resources, they'll see a note at the top of the **Provider offers** section of the [**Service providers**](view-manage-service-providers.md) page in the Azure portal. If a user in the customer's tenant is unable to perform this delegation, it's probably because they don't have the Owner role for the subscription. To find users who can delegate the subscription, the user can select the subscription in the Azure portal, open **Access control (IAM)**, and [view all users with the Owner role](https://docs.microsoft.com/azure/role-based-access-control/role-assignments-portal#view-roles-and-permissions).
131131

132132
Before a subscription (or resource groups within a subscription) can be onboarded, the subscription must be authorized for onboarding by manually registering the **Microsoft.ManagedServices** resource provider. A user in the customer's tenant with the Contributor or Owner role can do this by following the steps outlined in [Azure resource providers and types](../../azure-resource-manager/resource-manager-supported-services.md).
133133

0 commit comments

Comments
 (0)