You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/cost-management-billing/manage/assign-roles-azure-service-principals.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -72,10 +72,10 @@ Later in this article, you give permission to the Microsoft Entra app to act by
72
72
73
73
| Role | Actions allowed | Role definition ID |
74
74
| --- | --- | --- |
75
-
| EnrollmentReader | Enrollment readers can view data at the enrollment, department, and account scopes. The data contains charges for all of the subscriptions under the scopes, including across tenants. Can view the Azure Prepayment (previously called monetary commitment) balance associated with the enrollment. |aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e|
76
-
| EA purchaser | Purchase reservation orders and view reservation transactions. It has all the permissions of EnrollmentReader, which have all the permissions of DepartmentReader. It can view usage and charges across all accounts and subscriptions. Can view the Azure Prepayment (previously called monetary commitment) balance associated with the enrollment. |bbbb1b1b-cc2c-dd3d-ee4e-ffffff5f5f5f|
75
+
| EnrollmentReader | Enrollment readers can view data at the enrollment, department, and account scopes. The data contains charges for all of the subscriptions under the scopes, including across tenants. Can view the Azure Prepayment (previously called monetary commitment) balance associated with the enrollment. |24f8edb6-1668-4659-b5e2-40bb5f3a7d7e|
76
+
| EA purchaser | Purchase reservation orders and view reservation transactions. It has all the permissions of EnrollmentReader, which have all the permissions of DepartmentReader. It can view usage and charges across all accounts and subscriptions. Can view the Azure Prepayment (previously called monetary commitment) balance associated with the enrollment. |da6647fb-7651-49ee-be91-c43c4877f0c4|
77
77
| DepartmentReader | Download the usage details for the department they administer. Can view the usage and charges associated with their department. | db609904-a47f-4794-9be8-9bd86fbffd8a |
78
-
| SubscriptionCreator | Create new subscriptions in the given scope of Account. |cccc2c2c-dd3d-ee4e-ff5f-aaaaaa6a6a6a|
78
+
| SubscriptionCreator | Create new subscriptions in the given scope of Account. |a0bcee42-bf30-4d1b-926a-48d21664ef71|
79
79
80
80
- An EnrollmentReader role can be assigned to a service principal only by a user who has an enrollment writer role. The EnrollmentReader role assigned to a service principal isn't shown in the Azure portal. It gets created by programmatic means and is only for programmatic use.
81
81
- A DepartmentReader role can be assigned to a service principal only by a user who has an enrollment writer or department writer role.
@@ -110,11 +110,11 @@ A service principal can have only one role.
110
110
| --- | --- |
111
111
|`properties.principalId`| It's the value of Object ID. See [Find your service principal and tenant IDs](#find-your-service-principal-and-tenant-ids). |
112
112
|`properties.principalTenantId`| See [Find your service principal and tenant IDs](#find-your-service-principal-and-tenant-ids). |
## Assign the department reader role to the service principal
134
134
@@ -204,11 +204,11 @@ Now you can use the service principal to automatically access EA APIs. The servi
204
204
| --- | --- |
205
205
|`properties.principalId`| It's the value of Object ID. See [Find your service principal and tenant IDs](#find-your-service-principal-and-tenant-ids). |
206
206
|`properties.principalTenantId`| See [Find your service principal and tenant IDs](#find-your-service-principal-and-tenant-ids). |
0 commit comments