You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/cost-management-billing/manage/understand-ea-roles.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -85,12 +85,12 @@ Users with this role have the highest level of access to the Enrollment. They ca
85
85
- Manage other enterprise administrators.
86
86
- Manage department administrators.
87
87
- Manage notification contacts.
88
-
- Purchase Azure services, including reservations.
88
+
- Purchase Azure services, including reservations/savings plans.
89
89
- View usage across all accounts.
90
90
- View unbilled charges across all accounts.
91
91
- Create new subscriptions under active enrollment accounts.
92
-
- View and manage all reservationorders and reservations that apply to the Enterprise Agreement.
93
-
- Enterprise administrator (read-only) can view reservationorders and reservations. They can't manage them.
92
+
- View and manage all reservation/savings plan orders and reservations/savings plans that apply to the Enterprise Agreement.
93
+
- Enterprise administrator (read-only) can view reservation/savings plan orders and reservations/savings plans. They can't manage them.
94
94
95
95
You can have multiple enterprise administrators in an enterprise enrollment. You can grant read-only access to enterprise administrators.
96
96
@@ -102,10 +102,10 @@ The enterprise administrator role can be assigned to multiple accounts.
102
102
103
103
Users with this role have permissions to purchase Azure services, but aren't allowed to manage accounts. They can:
104
104
105
-
- Purchase Azure services, including reservations.
105
+
- Purchase Azure services, including reservations/savings plans.
106
106
- View usage across all accounts.
107
107
- View unbilled charges across all accounts.
108
-
- View and manage all reservationorders and reservations that apply to the Enterprise Agreement.
108
+
- View and manage all reservation/savings plan orders and reservations/savings plans that apply to the Enterprise Agreement.
109
109
110
110
The EA purchaser role is currently enabled only for SPN-based access. To learn how to assign the role to a service principal name, see [Assign roles to Azure Enterprise Agreement service principal names](assign-roles-azure-service-principals.md).
111
111
@@ -172,12 +172,12 @@ The following sections describe the limitations and capabilities of each role.
172
172
|Add or remove Department Administrators|✔|✘|✘|✔|✘|✘|✘|
173
173
|View Accounts in the enrollment |✔|✔|✔|✔⁵|✔⁵|✘|✔|
174
174
|Add Accounts to the enrollment and change Account Owner|✔|✘|✘|✔⁵|✘|✘|✘|
|Create and manage subscriptions and subscription permissions|✔|✘|✘|✘|✘|✔|✘|
177
177
178
178
- ⁴ Notification contacts are sent email communications about the Azure Enterprise Agreement.
179
179
- ⁵ Task is limited to accounts in your department.
180
-
- ⁶ A subscription owneror reservation purchaser can purchase and manage reservations and savings plans within the subscription, and only if permitted by the reservation purchase enabled flag. Enterprise administrators can purchase and manage reservations and savings plans across the billing account. Enterprise administrators (read-only) can view all purchased reservations and savings plans. The reservation purchase enabled flag doesn't affect the EA administrator roles. The Enterprise Admin (read-only) role holder isn't permitted to make purchases. However, if a user with that role also holds either a subscription owneror reservation purchaser permission, the user can purchase reservations and savings plans, regardless of the flag.
180
+
- ⁶ A subscription owner, reservation purchaser or savings plan purchaser can purchase and manage reservations and savings plans within the subscription, and only if permitted by the reservation/savings plan purchase-enabled flags. Enterprise administrators can purchase and manage reservations and savings plans across the billing account. Enterprise administrators (read-only) can view all purchased reservations and savings plans. The reservation/savings plan purchase-enabled flags don't affect the EA administrator roles. The Enterprise Admin (read-only) role holder isn't permitted to make purchases. However, if a user with that role also holds either a subscription owner, reservation purchaser or savings plan purchaser permission, the user can purchase reservations and/or savings plans, regardless of the flags.
0 commit comments