Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (2024)

  • Article

To manage your billing account for a Microsoft Customer Agreement, use the roles described in the following sections. These roles are in addition to the built-in roles Azure has to control access to resources. For more information, see Azure built-in roles.

This article applies to a billing account for a Microsoft Customer Agreement. Check if you have access to a Microsoft Customer Agreement.

Watch the Manage access to your MCA billing account video to learn how you can control access to your Microsoft Customer Agreement (MCA) billing account.

Billing role definitions

The following table describes the billing roles you use to manage your billing account, billing profiles, and invoice sections.

RoleDescription
Billing account ownerManage everything for billing account
Billing account contributorManage everything except permissions on the billing account
Billing account readerRead-only view of everything on billing account
Billing profile ownerManage everything for billing profile
Billing profile contributorManage everything except permissions on the billing profile
Billing profile readerRead-only view of everything on billing profile
Invoice managerView and pay invoices for billing profile
Invoice section ownerManage everything on invoice section
Invoice section contributorManage everything except permissions on the invoice section
Invoice section readerRead-only view of everything on the invoice section
Azure subscription creatorCreate Azure subscriptions

Billing account roles and tasks

A billing account is created when you sign up to use Azure. You use your billing account to manage invoices, payments, and track costs. Roles on the billing account have the highest level of permissions and users in these roles get visibility into the cost and billing information for your entire account. Assign these roles only to users that need to view invoices, and track costs for your entire account like member of the finance and the accounting teams. For more information, see Understand billing account.

The following tables show what role you need to complete tasks in the context of the billing account.

Note

The Global Administrator role is above the Billing Account Administrator. Global Administrators in a Microsoft Entra ID tenant can add or remove themselves as Billing Account Administrators at any time to the Microsoft Customer Agreement. For more information about elevating access, see Elevate access to manage billing accounts.

Manage billing account permissions and properties

TaskBilling account ownerBilling account contributorBilling account reader
View role assignments for billing account
Give others permissions to view and manage the billing account
View billing account properties like address, agreements and more
Update billing account properties like sold-to, display name, and more

Manage billing profiles for billing account

TaskBilling account ownerBilling account contributorBilling account reader
View all billing profiles for the account
Create new billing profiles

Manage invoices for billing account

TaskBilling account ownerBilling account contributorBilling account reader
View all invoices for the account
Pay invoices with credit card
Download invoices, Azure usage files, price sheets, and tax documents

Manage products for billing account

TaskBilling account ownerBilling account contributorBilling account reader
View all products purchased for the account
Manage billing for products like cancel, turn off auto renewal, and more

Manage subscriptions for billing account

TaskBilling account ownerBilling account contributorBilling account reader
View all Azure subscriptions created for the billing account
Create new Azure subscriptions
Cancel Azure subscriptions

Billing profile roles and tasks

Each billing account has at least one billing profile. Your first billing profile is set up when you sign up to use Azure. A monthly invoice is generated for the billing profile and contains all its associated charges from the prior month. You can set up more billing profiles based on your needs. Users with roles on a billing profile can view cost, set budget, and manage and pay its invoices. Assign these roles to users who are responsible for managing budget and paying invoices for the billing profile like members of the business administration teams in your organization. For more information, see Understand billing profiles.

The following tables show what role you need to complete tasks in the context of the billing profile.

Manage billing profile permissions, properties, and policies

TaskBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View role assignments for the billing profile
Give others permissions to view and manage the billing profile
View billing profile properties like PO number, bill-to, and more
Update billing profile properties
View policies applied on the billing profile like Azure reservation purchases, Azure Marketplace purchases, and more
Apply policies on the billing profile

Manage invoices for billing profile

TaskBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View all the invoices for the billing profile
Pay invoices with credit card
Download invoices, Azure usage and charges files, price sheets and tax documents for the billing profile

Manage invoice sections for billing profile

TaskBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View all the invoice sections for the billing profile
Create new invoice section for the billing profile

Manage products for billing profile

TaskBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View all products purchased for the billing profile
Manage billing for products like cancel, turn off auto renewal, and more
Change billing profile for the products

Manage payment methods for billing profile

TaskBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View payment methods for the billing profile
Manage payment methods such as replacing credit card, detaching credit card, and more
Track Azure credits balance for the billing profile

Manage subscriptions for billing profile

TaskBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View all Azure subscriptions for the billing profile
Create new Azure subscriptions
Cancel Azure subscriptions
Change billing profile for the Azure subscriptions

Invoice section roles and tasks

Each billing profile contains one invoice section by default. You may create more invoice sections to group cost on the billing profile's invoice. Users with roles on an invoice section can control who creates Azure subscriptions and make other purchases. Assign these roles to users who set up Azure environment for teams in our organization like engineering leads and technical architects. For more information, see Understand invoice section.

The following tables show what role you need to complete tasks in the context of invoice sections.

Manage invoice section permissions and properties

TasksInvoice section ownerInvoice section contributorInvoice section readerAzure subscription creatorBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View role assignments for invoice section
Give others permissions to view and manage the invoice section
View invoice section properties
Update invoice section properties

Manage products for invoice section

TasksInvoice section ownerInvoice section contributorInvoice section readerAzure subscription creatorBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View all products bought for the invoice section
Manage billing for products like cancel, turn off auto renewal, and more
Change invoice section for the products

Manage subscriptions for invoice section

TasksInvoice section ownerInvoice section contributorInvoice section readerAzure subscription creatorBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
View all Azure subscriptions for invoice section
Create Azure subscriptions
Cancel Azure subscriptions
Change invoice section for the Azure subscription
Request billing ownership of subscriptions from users in other billing accounts

Subscription billing roles and tasks

The following table shows what role you need to complete tasks in the context of a subscription.

TasksInvoice section ownerInvoice section contributorInvoice section readerAzure subscription creatorBilling profile ownerBilling profile contributorBilling profile readerInvoice managerBilling account ownerBilling account contributorBilling account reader
Create subscriptions
Update cost center for the subscription
Change invoice section for the subscription
Change billing profile for the subscription
Cancel Azure subscriptions

Manage billing roles in the Azure portal

  1. Sign in to the Azure portal.

  2. Search for Cost Management + Billing.

    Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (1)

  3. Select Access control (IAM) at a scope such as billing account, billing profile, or invoice section, where you want to give access.

  4. The Access control (IAM) page lists users and groups that are assigned to each role for that scope.

    Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (2)

  5. To give access to a user, Select Add from the top of the page. In the Role drop-down list, select a role. Enter the email address of the user to whom you want to give access. Select Save to assign the role.

    Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (3)

  6. To remove access for a user, select the user with the role assignment you want to remove. Select Remove.

    Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (4)

Check access to a Microsoft Customer Agreement

Check the agreement type to determine whether you have access to a billing account for a Microsoft Customer Agreement.

  1. Go to the Azure portal to check for billing account access. Search for and select Cost Management + Billing.

    Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (5)

  2. If you have access to just one billing scope, select Properties from the menu. You have access to a billing account for a Microsoft Customer Agreement if the billing account type is Microsoft Customer Agreement.

    Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (6)

  3. If you have access to multiple billing scopes, check the type in the billing account column. You have access to a billing account for a Microsoft Customer Agreement if the billing account type for any of the scopes is Microsoft Customer Agreement.

If you need help, contact support to get your issue resolved quickly.

Next steps

See the following articles to learn about your billing account:

  • Get stated with your billing account for Microsoft Customer Agreement
  • Create an Azure subscription for your billing account for Microsoft Customer Agreement
Billing roles for Microsoft Customer Agreements - Azure - Microsoft Cost Management (2024)

FAQs

What question can the Azure Cost Management tool help you answer? ›

Azure Cost Management lets you analyze past cloud usage and expenses, and predict future expenses. You can view costs in a daily, monthly, or annual trend, to identify trends and anomalies, and find opportunities for optimization and savings.

What is the billing role in Azure AD? ›

A billing account is created when you sign up to use Azure. You use your billing account to manage invoices, payments, and track costs. Roles on the billing account have the highest level of permissions and users in these roles get visibility into the cost and billing information for your entire account.

Which two features are available by using Azure Cost Management and Billing? ›

Expert-Verified Answer. Azure Cost Management Billing provides two key features: cost tracking and optimization, and budgeting and forecasting. These features enable users to monitor and manage their Azure cloud costs effectively and plan their budgets accordingly.

What is the role of billing administrator in Microsoft? ›

Determine account billing administrator

The billing administrator is the person who has permission to manage billing for an account. They're authorized to access billing on the Azure portal and do various billing tasks like create subscriptions, view and pay invoices, or update payment methods.

Top Articles
Latest Posts
Article information

Author: Otha Schamberger

Last Updated:

Views: 5864

Rating: 4.4 / 5 (75 voted)

Reviews: 90% of readers found this page helpful

Author information

Name: Otha Schamberger

Birthday: 1999-08-15

Address: Suite 490 606 Hammes Ferry, Carterhaven, IL 62290

Phone: +8557035444877

Job: Forward IT Agent

Hobby: Fishing, Flying, Jewelry making, Digital arts, Sand art, Parkour, tabletop games

Introduction: My name is Otha Schamberger, I am a vast, good, healthy, cheerful, energetic, gorgeous, magnificent person who loves writing and wants to share my knowledge and understanding with you.