Connect your Azure account

You can connect your Azure account to Cloud Commitment Management to get estimated cost savings analysis if you have one of these account or agreement types:

• Azure Enterprise Agreement (EA)
• Microsoft Customer Agreement (MCA)
• Microsoft Online Services Program (MOSP)/pay as you go (PAYG)

Cloud Solution Provider (CSP) users need to contact Support.

The Cloud Commitment Management Azure team can help you to set up the registered application and transfer the application credentials.

Connect your account

1. Make sure you have set up:

   • The read-only permissions required for the Cloud Commitment Management cost specialist team.
   • The Azure user as a global administrator with elevated access and access to the management groups or subscriptions.
   • The Azure user as an enterprise administrator (EA) or billing account owner (MCA).
   • A member account. The account cannot be a guest user account.

2. Go to the Commitment Management page (Cloud > Commitment Management).

3. Select Microsoft Azure > Add Billing Account ID.

4. Create a registered application on the Azure portal. Select Accounts in this organizational directly only, without a redirect URI.

5. Create a new client secret. Save the secret key and its expiration date.

   note

   Save the secret key because it won't be displayed again after you leave this page.

6. For EA only, assign the EnrollmentReader role to the registered application using a Microsoft API.

   Sample header input and body of API call

   Header Inputs: 
   billingAccountName: <enrollment id> 
   billingRoleAssignmentName: <A unique GUID you generate, see https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/new-guid>
   Example of body for API call: 
   { 
   "properties": { 
   "roleDefinitionId": "/providers/Microsoft.Billing/billingAccounts/<insert enrollment number>/billingRoleDefinitions/24f8edb6-1668-4659-b5e2-40bb5f3a7d7e", 
   "principalTenantId": "<insert Tenant ID>", 
   "principalId": "<insert Object Id of the service principle>"        
   } 
   } 

7. For MCA only, add the billing account reader role to the registered application.

8. Assign the cost management reader role to the registered application on the management groups or subscriptions you want to manage (the management groups/subscriptions you want Cloud Commitment Management Azure to purchase reservations).

   note

   For PAYG only, assign the Cost Management permissions on the management group (tenant root group).

9. Assign the reservation reader role to the registered application.

   1. Go to the Reservations page > Role assignments > Add role assignment.
   2. Search for and select Reservation Reader, then click Next > Select Members.
   3. Search for and select the Cloud Commitment Management Azure registered application, then click Review + Assign.

10. In Flexera One, enter the Application ID, Tenant ID, Application Secret Value and Expiration date and click Connect.