Allow CloudMonitor to access and view Billing Information for Microsoft Customer Agreement customers

Follow these steps to allow CloudMonitor to access and view Billing Information for Microsoft Customer Agreement customers.

Tip

Due to a limitation with MCA billing accounts that affect Service Principals accessing cost data, we require all MCA Customers to use a B2B User with Reader Role at BillingAccount/BillingProfile scope. This limitation is a Microsoft-acknowledged issue and is currently being fixed by Microsoft.

Before proceeding, please confirm that you have already created the CloudMonitor Synapse AD B2B user. If not, please visit the following webpage How to create the CloudMonitor Synapse AD B2B User for instructions on how to do so.

To demonstrate this limitation, you can attempt to use your Service Principal and follow instructions outlined in the following webpage Exports - Create Or Update - REST API.

Step 1

Open the Azure Portal.

Step 2

Open the “Cost Management + Billing” section in the Azure Portal. Note: This is not at the Subscription level and you will need to be a Global Azure Admin to do this.

Step 3

Select the Billing scope you want to grant a Billing account reader role to.

Step 4

Click “Access control (IAM)” and click ” + Add”

Step 5

Choose “Billing account reader”. This does not have any permissions to write any data.

Step 6

Select the Service Principal you created for CloudMonitor and click on Add.

Step 7

Lastly, select the B2B Synapse User you added for CloudMonitor and click on Add.

Danger

You have successfully granted the read-only Billing account reader role to the CloudMonitor Service Principal and B2B user.

Please proceed with the next step:Configuring Storage for CloudMonitor to schedule Exports : CloudMonitor Helpdesk