Skip to content

Commit ccf441c

Browse files
Merge pull request #288724 from bandersmsft/uuf-269343
MCM -Update understand-ea-roles for UUF 269343
2 parents dada763 + 49cc2d2 commit ccf441c

File tree

1 file changed

+19
-13
lines changed

1 file changed

+19
-13
lines changed

articles/cost-management-billing/manage/understand-ea-roles.md

Lines changed: 19 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,19 @@
11
---
2-
title: Understand admin roles for Enterprise Agreements (EA) in Azure
3-
description: Learn about Enterprise administrator roles in Azure. You can assign five distinct administrative roles.
2+
title: Understand admin roles for Enterprise Agreements in Azure
3+
description: Learn about the administrative roles available to manage Azure Enterprise Agreements (EA), including permissions and how to assign them.
44
author: bandersmsft
55
ms.reviewer: sapnakeshari
66
ms.service: cost-management-billing
77
ms.subservice: enterprise
8-
ms.topic: conceptual
9-
ms.date: 09/04/2024
8+
ms.topic: concept-article
9+
ms.date: 10/18/2024
1010
ms.author: banders
11+
#customer intent: As an enterprise administrator, I want learn about the administrative roles available to manage Azure Enterprise Agreements so that manage my enterprise agreement.
1112
---
1213

13-
# Managing Azure Enterprise Agreement roles
14-
15-
> [!NOTE]
16-
> Enterprise administrators have permissions to create new subscriptions under active enrollment accounts. For more information about creating new subscriptions, see [Add a new subscription](direct-ea-administration.md#add-a-subscription).
14+
# Manage Azure Enterprise Agreement roles
1715

18-
19-
To help manage your organization's usage and spend, Azure customers with an Enterprise Agreement can assign six distinct administrative roles:
16+
To help manage your organization's usage and spend, Azure customers with an Enterprise Agreement can assign the following six distinct administrative roles.
2017

2118
- Enterprise Administrator
2219
- Enterprise Administrator (read only)¹
@@ -29,6 +26,9 @@ To help manage your organization's usage and spend, Azure customers with an Ente
2926

3027
² The Bill-To contact can't be added or changed in the Azure portal. It gets added to the EA enrollment based on the user who is set up as the Bill-To contact on agreement level. To change the Bill-To contact, a request needs to be made through a partner/software advisor to the Regional Operations Center (ROC).
3128

29+
> [!NOTE]
30+
> Enterprise administrators have permissions to create new subscriptions under active enrollment accounts. For more information about creating new subscriptions, see [Add a new subscription](direct-ea-administration.md#add-a-subscription).
31+
3232
The first enrollment administrator that is set up during the enrollment provisioning determines the authentication type of the Bill-to contact account. When the bill-to contact gets added to the Azure portal as a read-only administrator, they're given Microsoft account authentication.
3333

3434
For example, if the initial authentication type is set to Mixed, the EA is added as a Microsoft account and the Bill-to contact has read-only EA admin privileges. If the EA admin doesn’t approve Microsoft account authorization for an existing Bill-to contact, the EA admin can delete the user in question. Then they can ask the customer to add the user back as a read-only administrator with a Work or School account Only set at enrollment level in the Azure portal.
@@ -53,7 +53,7 @@ The Azure portal hierarchy for Cost Management consists of:
5353

5454
The following diagram illustrates simple Azure EA hierarchies.
5555

56-
:::image type="content" border="false" source="./media/understand-ea-roles/ea-hierarchies.png" alt-text="Diagram of simple Azure EA hierarchies.":::
56+
:::image type="content" border="false" source="./media/understand-ea-roles/ea-hierarchies.png" alt-text="Diagram showing the hierarchical structure of Azure Enterprise Agreement roles.":::
5757

5858
## Enterprise user roles
5959

@@ -143,6 +143,8 @@ The following sections describe the limitations and capabilities of each role.
143143

144144
## User limit for admin roles
145145

146+
The following table outlines the user limits and permissions for each administrative role in an Enterprise Agreement.
147+
146148
|Role| User limit|
147149
|---|---|
148150
|Enterprise Administrator|Unlimited|
@@ -156,6 +158,8 @@ The following sections describe the limitations and capabilities of each role.
156158

157159
## Organization structure and permissions by role
158160

161+
The following table shows user limits and permissions associated with each administrative role.
162+
159163
|Tasks| Enterprise Administrator|Enterprise Administrator (read only)| EA Purchaser | Department Administrator|Department Administrator (read only)|Account Owner| Partner|
160164
|---|---|---|---|---|---|---|---|
161165
|View Enterprise Administrators||||||||
@@ -172,7 +176,7 @@ The following sections describe the limitations and capabilities of each role.
172176

173177
- ⁴ Notification contacts are sent email communications about the Azure Enterprise Agreement.
174178
- ⁵ Task is limited to accounts in your department.
175-
- ⁶ A subscription owner, reservation purchaser or savings plan purchaser can purchase and manage reservations and savings plans within the subscription, and only if permitted by the reservation/savings plan purchase-enabled flags. Enterprise administrators can purchase and manage reservations and savings plans across the billing account. Enterprise administrators (read-only) can view all purchased reservations and savings plans. The reservation/savings plan purchase-enabled flags don't affect the EA administrator roles. The Enterprise Admin (read-only) role holder isn't permitted to make purchases. However, if a user with that role also holds either a subscription owner, reservation purchaser or savings plan purchaser permission, the user can purchase reservations and/or savings plans, regardless of the flags.
179+
- ⁶ A subscription owner, reservation purchaser, or savings plan purchaser can purchase and manage reservations and savings plans within the subscription, and only if permitted by the reservation/savings plan purchase-enabled flags. Enterprise administrators can purchase and manage reservations and savings plans across the billing account. Enterprise administrators (read-only) can view all purchased reservations and savings plans. The reservation/savings plan purchase-enabled flags don't affect the EA administrator roles. The Enterprise Admin (read-only) role holder isn't permitted to make purchases. However, if a user with that role also holds either a subscription owner, reservation purchaser or savings plan purchaser permission, the user can purchase reservations and/or savings plans, regardless of the flags.
176180

177181
## Add a new enterprise administrator
178182

@@ -186,7 +190,7 @@ When new Account Owners (AO) are added to an Azure EA enrollment for the first t
186190
> [!NOTE]
187191
> If the Account Owner is a service account and doesn't have an email, use an In-Private session to sign in to the Azure portal and navigate to Cost Management to be prompted to accept the activation welcome email.
188192
189-
Once they activate their account, the account status is updated from _pending_ to _active_. The account owner needs to read the `Warning` message and select **Continue**. New users might get prompted to enter their first and last name to create a Commerce Account. If so, they must add the required information to continue and then the account is activated.
193+
Once they activate their account, the account status is updated from **Pending** to **Active**. The account owner needs to read the content and select **Yes, I wish to continue**. New users might get prompted to enter their first and family name to create a Commerce Account. If so, they must add the required information to continue and then the account is activated.
190194

191195
> [!NOTE]
192196
> A subscription is associated with one and only one account. The warning message includes details that warn the Account Owner that accepting the offer will move the subscriptions associated with the Account to the new Enrollment.
@@ -199,6 +203,8 @@ Direct EA admins can add department admins in the Azure portal. For more informa
199203

200204
## Usage and costs access by role
201205

206+
The following table shows usage and costs access by administrative role.
207+
202208
|Tasks| Enterprise Administrator|Enterprise Administrator (read only)|EA Purchaser|Department Administrator|Department Administrator (read only) |Account Owner| Partner|
203209
|---|---|---|---|---|---|---|---|
204210
|View credit balance including Azure Prepayment||||||||

0 commit comments

Comments
 (0)