You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/lighthouse/how-to/view-manage-customers.md
+19-20Lines changed: 19 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,43 +1,42 @@
1
1
---
2
2
title: View and manage customers and delegated resources in the Azure portal
3
-
description: As a service provider or enterprise using Azure Lighthouse, you can view all of your delegated resources and subscriptions by going to My customers in the Azure portal.
4
-
ms.date: 03/01/2023
3
+
description: As a service provider or enterprise using Azure Lighthouse, you can view delegated resources and subscriptions by going to My customers in the Azure portal.
4
+
ms.date: 07/10/2024
5
5
ms.topic: how-to
6
6
---
7
7
8
8
# View and manage customers and delegated resources in the Azure portal
9
9
10
10
Service providers using [Azure Lighthouse](../overview.md) can use the **My customers** page in the [Azure portal](https://portal.azure.com) to view delegated customer resources and subscriptions.
11
11
12
+
To view information about a customer, you must have been granted the [Reader](../../role-based-access-control/built-in-roles.md#reader) role (or another built-in role that includes Reader access) when that customer was onboarded.
13
+
12
14
> [!TIP]
13
15
> While we'll refer to service providers and customers here, [enterprises managing multiple tenants](../concepts/enterprise.md) can use the same process to consolidate their management experience.
14
16
15
-
To access the **My customers** page in the Azure portal, enter "My customers" in the search box near the top of the Azure portal. You can also select **All services**, then search for**Azure Lighthouse**, or search for "Azure Lighthouse". From the Azure Lighthouse page, select**Manage your customers**.
17
+
To access the **My customers** page in the Azure portal, enter "My customers" in the search box near the top of the Azure portal. You can also access this page from the main**Azure Lighthouse** page in the Azure portal by selecting**Manage your customers**.
16
18
17
-
Keep in mind that the top **Customers** section of the **My customers** page only shows info about customers who have delegated subscriptions or resource groups to your Microsoft Entra tenant through Azure Lighthouse. If you work with other customers (such as through the [Cloud Solution Provider (CSP) program](/partner-center/csp-overview)), you won't see info about those customers in the **Customers** section unless you [onboarded their resources to Azure Lighthouse](onboard-customer.md). However, you may see details about certain CSP customers in the [Cloud Solution Provider (Preview) section](#cloud-solution-provider-preview) lower on the page.
19
+
The **Customers** section of the **My customers** page only shows information about customers who have delegated subscriptions or resource groups to your Microsoft Entra tenant through Azure Lighthouse. If you work with other customers (such as through the [Cloud Solution Provider (CSP) program](/partner-center/csp-overview)), you won't see those customers in the **Customers** section unless you [onboarded their resources to Azure Lighthouse](onboard-customer.md). However, you may see details about certain CSP customers in the [**Cloud Solution Provider (Preview)** section](#cloud-solution-provider-preview) lower on the page.
18
20
19
21
> [!NOTE]
20
-
> Your customers can view info about service providers by navigating to **Service providers** in the Azure portal. For more info, see [View and manage service providers](view-manage-service-providers.md).
22
+
> Your customers can view details about service providers by navigating to **Service providers** in the Azure portal. For more information, see [View and manage service providers](view-manage-service-providers.md).
21
23
22
24
## View and manage customer details
23
25
24
-
To view customer details, select **Customers** on the left side of the **My customers** page.
25
-
26
-
> [!IMPORTANT]
27
-
> In order to see this information, users must have been granted the [Reader](../../role-based-access-control/built-in-roles.md#reader) role (or another built-in role that includes Reader access) in the onboarding process.
26
+
To view customer details, select **Customers** from the service menu of the **My customers** page.
28
27
29
-
For each customer, you'll see the customer's name, customer ID (tenant ID), and the **Offer ID** and **Offer version** associated with the engagement. In the **Delegations** column, you'll see the number of delegated subscriptions and/or the number of delegated resource groups.
28
+
For each customer, you'll see the customer's name and customer ID (tenant ID), along with the **Offer ID** and **Offer version** associated with the engagement. In the **Delegations** column, you'll see the number of delegated subscriptions and/or resource groups.
30
29
31
30
Options at the top of the page let you sort, filter, and group your customer information by specific customers, offers, or keywords.
32
31
33
-
You can view the following information from this page:
32
+
To see additional details, use the following options:
34
33
35
34
- To see all of the subscriptions, offers, and delegations associated with a customer, select the customer's name.
36
-
- To see more details about an offer and its delegations, select the offer name.
37
-
- To view more details about role assignments for delegated subscriptions or resource groups, select the entry in the **Delegations** column.
35
+
- To see details about an offer and its delegations, select the offer name.
36
+
- To see details about role assignments for delegated subscriptions or resource groups, select the entry in the **Delegations** column.
38
37
39
38
> [!NOTE]
40
-
> If a customer renames a subscription after it's been delegated, you'll see the updated subscription name. If they rename the tenant, you may still see the older tenant name in some places in the Azure portal.
39
+
> If a customer renames a subscription after it's been delegated, you'll see the updated subscription name. However, if they rename their tenant, you may still see the older tenant name in some places in the Azure portal.
41
40
42
41
## View and manage delegations
43
42
@@ -47,33 +46,33 @@ Options at the top of the page let you sort, filter, and group this information
47
46
48
47
### View role assignments
49
48
50
-
The users and permissions associated with each delegation appear in the **Role assignments** column. You can select each entry to view the full list of users, groups, and service principals that have been granted access to the subscription or resource group. From there, you can select a particular user, group, or service principal name to get more details.
49
+
The users and permissions associated with each delegation appear in the **Role assignments** column. You can select each entry to view more details. After you do so, select **Role assignments** to see the full list of users, groups, and service principals that have been granted access to the subscription or resource group. From there, you can select a particular user, group, or service principal name to see more information.
51
50
52
51
### Remove delegations
53
52
54
-
If you included users with the [Managed Services Registration Assignment Delete Role](../../role-based-access-control/built-in-roles.md#managed-services-registration-assignment-delete-role) when onboarding a customer to Azure Lighthouse, those users can remove a delegation by selecting the trash can icon that appears in the row for that delegation. When they do so, no users in the service provider's tenant will be able to access the resources that had been previously delegated.
53
+
If you included users with the [Managed Services Registration Assignment Delete Role](../../role-based-access-control/built-in-roles.md#managed-services-registration-assignment-delete-role) when onboarding a customer to Azure Lighthouse, those users can remove delegations by selecting the trash can icon that appears in the row for that delegation. When they do so, no users in the service provider's tenant will be able to access the resources that had been previously delegated.
55
54
56
55
For more information, see [Remove access to a delegation](remove-delegation.md).
57
56
58
57
## View delegation change activity
59
58
60
-
The **Activity log** section of the **My customers** page keeps track of every time customer subscriptions or resource groups are delegated to your tenant, and every time previously delegated resources are removed. This information can only be viewed by users who have been [assigned the Monitoring Reader role at root scope](monitor-delegation-changes.md).
59
+
The **Activity log** section of the **My customers** page keeps track of every time that a customer subscription or resource group is delegated to your tenant. It also records whenever any previously delegated resources are removed. This information can only be viewed by users who have been [assigned the Monitoring Reader role at root scope](monitor-delegation-changes.md).
61
60
62
61
For more information, see [View delegation changes in the Azure portal](monitor-delegation-changes.md#view-delegation-changes-in-the-azure-portal).
63
62
64
63
## Work in the context of a delegated subscription
65
64
66
65
You can work directly in the context of a delegated subscription within the Azure portal, without switching the directory you're signed in to. To do so:
67
66
68
-
1. Select the **Directory + subscriptions** or **Settings** icon near the top of the Azure portal.
67
+
1. Select the **Settings** icon near the top of the Azure portal.
69
68
1. In the [Directories + subscriptions settings page](../../azure-portal/set-preferences.md#directories--subscriptions), ensure that the **Advanced filters** toggle is [turned off](../../azure-portal/set-preferences.md#subscription-filters).
70
69
1. In the **Default subscription filter** section, select the appropriate directory and subscription. (If you've been granted access to one or more resource groups, rather than to an entire subscription, select the subscription to which that resource group belongs. You'll then work in the context of that subscription, but will only be able to access the designated resource group(s).)
71
70
72
71
:::image type="content" source="../media/subscription-filter-delegated.png" alt-text="Screenshot of the default subscription filter with one delegated subscription selected.":::
73
72
74
73
After that, when you access a service that supports [cross-tenant management experiences](../concepts/cross-tenant-management-experience.md), the service will default to the context of the delegated subscription that you included in your filter.
75
74
76
-
You can change the default subscription at any time by following the steps above and choosing a different subscription, or selecting multiple subscriptions. You can also select **All directories**, then check the **Select all** box, if you want the filter to include all of the subscriptions to which you have access.
75
+
You can change the default subscription at any time by following the steps above and choosing a different subscription (or multiple subscriptions). If you want the filter to include all of the subscriptions to which you have access, select **All directories**, then check the **Select all** box.
77
76
78
77
:::image type="content" source="../media/subscription-filter-all.png" alt-text="Screenshot of the default subscription filter with all directories and subscriptions selected":::
79
78
@@ -84,7 +83,7 @@ You can also work on delegated subscriptions or resource groups by selecting the
84
83
85
84
## Cloud Solution Provider (Preview)
86
85
87
-
A separate **Cloud Solution Provider (Preview)** section of the **My customers** page shows billing info and resources for your CSP customers who have [signed the Microsoft Customer Agreement (MCA)](/partner-center/confirm-customer-agreement) and are [under the Azure plan](/partner-center/azure-plan-get-started). For more information, see [Get started with your Microsoft Partner Agreement billing account](../../cost-management-billing/understand/mpa-overview.md).
86
+
A separate **Cloud Solution Provider (Preview)** section of the **My customers** page shows billing information and resources for your CSP customers who have [signed the Microsoft Customer Agreement (MCA)](/partner-center/confirm-customer-agreement) and are [under the Azure plan](/partner-center/azure-plan-get-started). For more information, see [Get started with your Microsoft Partner Agreement billing account](../../cost-management-billing/understand/mpa-overview.md).
88
87
89
88
These CSP customers appear in this section whether or not you also onboarded them to Azure Lighthouse. Similarly, a CSP customer doesn't have to appear in the **Cloud Solution Provider (Preview)** section of **My customers** in order for you to onboard them to Azure Lighthouse.
0 commit comments