Merge pull request #233791 from bandersmsft/ghissue107536

MCM - Updates for ghissue107536 - create EA sub in other directory

Author: JamesJBarnett

articles/cost-management-billing/manage/direct-ea-administration.md

@@ -413,6 +413,32 @@ New subscriptions can take up to 24 hours to appear in the subscriptions list. A
 
 You can also create subscriptions by navigating to the Azure Subscriptions page and selecting **+ Add**.
 
+### Create subscription in other tenant and view transfer requests
+
+A user with the following permission can create subscriptions in another directory if they're allowed or exempted with subscription policy. For more information, see [Setting subscription policy](manage-azure-subscription-policy.md#setting-subscription-policy).
+
+- Account owner
+
+When you try to create a subscription for someone in a directory outside of the current directory (such as a customer's tenant), a _subscription creation request_ is created.
+
+:::image type="content" source="./media/direct-ea-administration/create-subscription-other-directory.png" alt-text="Screenshot showing Create a subscription outside the current directory." lightbox="./media/direct-ea-administration/create-subscription-other-directory.png" :::
+
+When the request is created, the subscription owner (the customer) is sent an email letting them know that they need to accept subscription ownership. The email contains a link used to accept ownership in the Azure portal. The customer must accept the request within seven days. If not accepted within seven days, the request expires. The person that created the request can also manually send their customer the ownership URL to accept the subscription.
+
+After the request is created, it's visible in the Azure portal at **Subscriptions** > **View Requests** by the following people:
+
+- The tenant global administrator of the source tenant where the subscription provisioning request is made.
+- The user who made the subscription creation request for the subscription being provisioned in the other tenant.
+- The user who made the request to provision the subscription in a different tenant than where they make the [Subscription – Alias REST API](/rest/api/subscription/) call instead of the Azure portal.
+
+The subscription owner in the request who resides in the target tenant doesn't see this subscription creation request on the View requests page. Instead, they receive an email with the link to accept ownership of the subscription in the target tenant.
+
+:::image type="content" source="./media/direct-ea-administration/view-requests.png" alt-text="Screenshot showing View Requests page that lists all subscription creation requests." lightbox="./media/direct-ea-administration/view-requests.png" :::
+
+Anyone with access to view the request can view its details. In the request details, the **Accept ownership URL** is visible. You can copy it to manually share it with the subscription owner in the target tenant for subscription ownership acceptance.
+
+:::image type="content" source="./media/direct-ea-administration/request-details.png" alt-text="Screenshot showing request details to view Accept ownership URL." lightbox="./media/direct-ea-administration/request-details.png" :::
+
 ## Cancel a subscription
 
 Only account owners can cancel their own subscriptions.

articles/cost-management-billing/manage/media/direct-ea-administration/create-subscription-other-directory.png

@@ -5,7 +5,7 @@ author: bandersmsft
 ms.service: cost-management-billing
 ms.subservice: billing
 ms.topic: how-to
-ms.date: 03/27/2023
+ms.date: 04/07/2023
 ms.reviewer: sapnakeshari
 ms.author: banders 
 ms.custom: devx-track-azurepowershell, devx-track-azurecli
@@ -288,6 +288,12 @@ You get the subscriptionId as part of the response from the command.
 
 ---
 
+## Create subscriptions in a different enrollment
+
+Using the subscription [Alias](/rest/api/subscription/2021-10-01/alias/create) REST API, you can use the `subscriptionTenantId` parameter in the request body. Your SPN must get the token from the home tenant to create the subscription. After you create the SPN, you get the token from `subscriptionTenantId` and accept the transfer using the [Accept Ownership](/rest/api/subscription/2021-10-01/subscription/accept-ownership) API.
+
+For more information about creating EA subscriptions in another tenant, see [Create subscription in other tenant and view transfer requests](direct-ea-administration.md#create-subscription-in-other-tenant-and-view-transfer-requests).
+
 ## Use ARM template or Bicep
 
 The previous section showed how to create a subscription with PowerShell, CLI, or REST API. If you need to automate creating subscriptions, consider using an Azure Resource Manager template (ARM template) or [Bicep file](../../azure-resource-manager/bicep/overview.md).
@@ -462,8 +468,6 @@ resource subToMG 'Microsoft.Management/managementGroups/subscriptions@2020-05-01
 - Only Azure Enterprise subscriptions are created using the API.
 - There's a limit of 5000 subscriptions per enrollment account. After that, more subscriptions for the account can only be created in the Azure portal. To create more subscriptions through the API, create another enrollment account. Canceled, deleted, and transferred subscriptions count toward the 5000 limit.
 - Users who aren't Account Owners, but were added to an enrollment account via Azure RBAC, can't create subscriptions in the Azure portal.
-- You can't select the tenant for the subscription to be created in. The subscription is always created in the home tenant of the Account Owner. To move the subscription to a different tenant, see [change subscription tenant](../../active-directory/fundamentals/active-directory-how-subscriptions-associated-directory.md).
-
 
 ## Next steps