You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/cost-management-billing/manage/understand-ea-roles.md
+19-13Lines changed: 19 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,22 +1,19 @@
1
1
---
2
-
title: Understand admin roles for Enterprise Agreements (EA) in Azure
3
-
description: Learn about Enterprise administrator roles in Azure. You can assign five distinct administrative roles.
2
+
title: Understand admin roles for Enterprise Agreements in Azure
3
+
description: Learn about the administrative roles available to manage Azure Enterprise Agreements (EA), including permissions and how to assign them.
4
4
author: bandersmsft
5
5
ms.reviewer: sapnakeshari
6
6
ms.service: cost-management-billing
7
7
ms.subservice: enterprise
8
-
ms.topic: conceptual
9
-
ms.date: 09/04/2024
8
+
ms.topic: concept-article
9
+
ms.date: 10/18/2024
10
10
ms.author: banders
11
+
#customer intent: As an enterprise administrator, I want learn about the administrative roles available to manage Azure Enterprise Agreements so that manage my enterprise agreement.
11
12
---
12
13
13
-
# Managing Azure Enterprise Agreement roles
14
-
15
-
> [!NOTE]
16
-
> Enterprise administrators have permissions to create new subscriptions under active enrollment accounts. For more information about creating new subscriptions, see [Add a new subscription](direct-ea-administration.md#add-a-subscription).
14
+
# Manage Azure Enterprise Agreement roles
17
15
18
-
19
-
To help manage your organization's usage and spend, Azure customers with an Enterprise Agreement can assign six distinct administrative roles:
16
+
To help manage your organization's usage and spend, Azure customers with an Enterprise Agreement can assign the following six distinct administrative roles.
20
17
21
18
- Enterprise Administrator
22
19
- Enterprise Administrator (read only)¹
@@ -29,6 +26,9 @@ To help manage your organization's usage and spend, Azure customers with an Ente
29
26
30
27
² The Bill-To contact can't be added or changed in the Azure portal. It gets added to the EA enrollment based on the user who is set up as the Bill-To contact on agreement level. To change the Bill-To contact, a request needs to be made through a partner/software advisor to the Regional Operations Center (ROC).
31
28
29
+
> [!NOTE]
30
+
> Enterprise administrators have permissions to create new subscriptions under active enrollment accounts. For more information about creating new subscriptions, see [Add a new subscription](direct-ea-administration.md#add-a-subscription).
31
+
32
32
The first enrollment administrator that is set up during the enrollment provisioning determines the authentication type of the Bill-to contact account. When the bill-to contact gets added to the Azure portal as a read-only administrator, they're given Microsoft account authentication.
33
33
34
34
For example, if the initial authentication type is set to Mixed, the EA is added as a Microsoft account and the Bill-to contact has read-only EA admin privileges. If the EA admin doesn’t approve Microsoft account authorization for an existing Bill-to contact, the EA admin can delete the user in question. Then they can ask the customer to add the user back as a read-only administrator with a Work or School account Only set at enrollment level in the Azure portal.
@@ -53,7 +53,7 @@ The Azure portal hierarchy for Cost Management consists of:
53
53
54
54
The following diagram illustrates simple Azure EA hierarchies.
55
55
56
-
:::image type="content" border="false" source="./media/understand-ea-roles/ea-hierarchies.png" alt-text="Diagram of simple Azure EA hierarchies.":::
56
+
:::image type="content" border="false" source="./media/understand-ea-roles/ea-hierarchies.png" alt-text="Diagram showing the hierarchical structure of Azure Enterprise Agreement roles.":::
57
57
58
58
## Enterprise user roles
59
59
@@ -143,6 +143,8 @@ The following sections describe the limitations and capabilities of each role.
143
143
144
144
## User limit for admin roles
145
145
146
+
The following table outlines the user limits and permissions for each administrative role in an Enterprise Agreement.
147
+
146
148
|Role| User limit|
147
149
|---|---|
148
150
|Enterprise Administrator|Unlimited|
@@ -156,6 +158,8 @@ The following sections describe the limitations and capabilities of each role.
156
158
157
159
## Organization structure and permissions by role
158
160
161
+
The following table shows user limits and permissions associated with each administrative role.
162
+
159
163
|Tasks| Enterprise Administrator|Enterprise Administrator (read only)| EA Purchaser | Department Administrator|Department Administrator (read only)|Account Owner| Partner|
160
164
|---|---|---|---|---|---|---|---|
161
165
|View Enterprise Administrators|✔|✔| ✔|✘|✘|✘|✔|
@@ -172,7 +176,7 @@ The following sections describe the limitations and capabilities of each role.
172
176
173
177
- ⁴ Notification contacts are sent email communications about the Azure Enterprise Agreement.
174
178
- ⁵ Task is limited to accounts in your department.
175
-
- ⁶ A subscription owner, reservation purchaser or savings plan purchaser can purchase and manage reservations and savings plans within the subscription, and only if permitted by the reservation/savings plan purchase-enabled flags. Enterprise administrators can purchase and manage reservations and savings plans across the billing account. Enterprise administrators (read-only) can view all purchased reservations and savings plans. The reservation/savings plan purchase-enabled flags don't affect the EA administrator roles. The Enterprise Admin (read-only) role holder isn't permitted to make purchases. However, if a user with that role also holds either a subscription owner, reservation purchaser or savings plan purchaser permission, the user can purchase reservations and/or savings plans, regardless of the flags.
179
+
- ⁶ A subscription owner, reservation purchaser, or savings plan purchaser can purchase and manage reservations and savings plans within the subscription, and only if permitted by the reservation/savings plan purchase-enabled flags. Enterprise administrators can purchase and manage reservations and savings plans across the billing account. Enterprise administrators (read-only) can view all purchased reservations and savings plans. The reservation/savings plan purchase-enabled flags don't affect the EA administrator roles. The Enterprise Admin (read-only) role holder isn't permitted to make purchases. However, if a user with that role also holds either a subscription owner, reservation purchaser or savings plan purchaser permission, the user can purchase reservations and/or savings plans, regardless of the flags.
176
180
177
181
## Add a new enterprise administrator
178
182
@@ -186,7 +190,7 @@ When new Account Owners (AO) are added to an Azure EA enrollment for the first t
186
190
> [!NOTE]
187
191
> If the Account Owner is a service account and doesn't have an email, use an In-Private session to sign in to the Azure portal and navigate to Cost Management to be prompted to accept the activation welcome email.
188
192
189
-
Once they activate their account, the account status is updated from _pending_ to _active_. The account owner needs to read the `Warning` message and select **Continue**. New users might get prompted to enter their first and last name to create a Commerce Account. If so, they must add the required information to continue and then the account is activated.
193
+
Once they activate their account, the account status is updated from **Pending** to **Active**. The account owner needs to read the content and select **Yes, I wish to continue**. New users might get prompted to enter their first and family name to create a Commerce Account. If so, they must add the required information to continue and then the account is activated.
190
194
191
195
> [!NOTE]
192
196
> A subscription is associated with one and only one account. The warning message includes details that warn the Account Owner that accepting the offer will move the subscriptions associated with the Account to the new Enrollment.
@@ -199,6 +203,8 @@ Direct EA admins can add department admins in the Azure portal. For more informa
199
203
200
204
## Usage and costs access by role
201
205
206
+
The following table shows usage and costs access by administrative role.
0 commit comments