Skip to main content

Access roles and permissions

You can get an initial analysis to see how much Cloud Commitment Management can save you if you connect your Azure account to Flexera One. For the initial analysis, you need to connect your Azure account to Cloud Commitment Management using a registered application. This gives the Cloud Commitment Management cost specialists access to your cost and usage data so they can provide the analysis.

When you decide to onboard Cloud Commitment Management, you'll need to update the roles and permissions.

Read-only roles needed for Cloud Commitment Management analysis and planning​

These read-only roles and billing access below is relevant only if you have not signed a contract for Cloud Commitment Management.

Cost management reader role​

The Cost Management Reader role needs to be assigned to the registered application at the Management Group or Subscriptions scope that is going to be analyzed.

Reservation reader role​

The Azure Reservation Reader role needs to be assigned to the registered application.

Enterprise Agreement only: enrollment reader role​

The registered application also be given Enrollment Reader access to view Cost Management data.

Microsoft Customer Agreement only: MCA billing account reader​

The registered application also needs to be given MCA Billing Account Reader access to view Cost Management data.

Full permissions needed for reservation management​

These full permission roles and billing access are relevant only if you have a signed contract and will be setting up the roles below during the onboarding process.

Reservation administrator role​

The Azure Reservation Administrator role assigned to the registered application to view and manage preexisting reservations. This permission is in Azure's reservation page.

Reservation purchaser role​

The Azure Reservation Purchaser role assigned to the registered application on the subscriptions you would like Cloud Commitment Management to purchase reservations on (this is where the costs will go).

Reservation owner role​

The Azure Reservation Owner role assigned to the registered application to view and manage preexisting reservations orders. This permission is in Azure's reservation page.

Savings plan purchaser role​

The Azure Savings Plan Purchaser role assigned to the registered application to purchase a savings plan.