Manage access to Azure billing - Microsoft Cost Management (2024)

Article
12/08/2023

You can provide others access to the billing information for your account in the Azure portal. The type of billing roles and the instructions to provide access to the billing information vary by the type of your billing account. To determine the type of your billing account, see Check the type of your billing account.

The article applies to customers with Microsoft Online Service program accounts. If you're an Azure customer with an Enterprise Agreement (EA) and are the Enterprise Administrator, you can give permissions to the Department Administrators and Account Owners in the Azure portal. For more information, see Understand Azure Enterprise Agreement administrative roles in Azure. If you're a Microsoft Customer Agreement customer, see, Understand Microsoft Customer Agreement administrative roles in Azure.

Account administrators for Microsoft Online Service program accounts

An Account Administrator is the only owner for a Microsoft Online Service Program billing account. The role is assigned to a person who signed up for Azure. Account Administrators are authorized to perform various billing tasks like create subscriptions, view invoices or change the billing for a subscription.

Give others access to view billing information

Account administrator can grant others access to Azure billing information by assigning one of the following roles on a subscription in their account.

Service Administrator
Coadministrator
Owner
Contributor
Reader
Billing Reader

These roles have access to billing information in the Azure portal. People that are assigned these roles can also use the Cost Management APIs to programmatically get invoices and usage details.

To assign roles, see Assign Azure roles using the Azure portal.

Note

Allow users to download invoices

After an Account administrator assigns the appropriate roles to other users, they must turn on access to download invoices in the Azure portal. Invoices older than December 2016 are available only to the Account Administrator.

Sign in to the Azure portal, as an Account Administrator,
Search on Cost Management + Billing.
In the left navigation menu, select Subscriptions. Depending on your access, you might need to select a billing scope and then select Subscriptions.
In the left navigation menu, select Invoices.
At the top of the page, select Edit invoice details, then select Allow others to download invoice.
On the Allow others to download invoice page, select a subscription that you want to give access to.
Select Users/groups with subscription-level access can download invoices to allow users with subscription-level access to download invoices.

For more information about allowing users with subscription-level access to download invoices, see Assign Azure roles using the Azure portal.
Select Save.

The Account Administrator can also configure to have invoices sent via email. To learn more, see Get your invoice in email.

Give read-only access to billing

Assign the Billing Reader role to someone that needs read-only access to the subscription billing information but not the ability to manage or create Azure services. This role is appropriate for users in an organization who are responsible for the financial and cost management for Azure subscriptions.

The Billing Reader feature is in preview, and doesn't yet support nonglobal clouds.

Assign the Billing Reader role to a user at the subscription scope.
For detailed steps, see Assign Azure roles using the Azure portal.

Note

If you're an EA customer, an Account Owner or Department Administrator can assign the Billing Reader role to team members. But for that Billing Reader to view billing information for the department or account, the Enterprise Administrator must enable AO view charges or DA view charges policies in the Azure portal.

Check the type of your billing account

Sign in to the Azure portal.
Search for Cost Management + Billing.
If you have access to just one billing scope, select Properties from the left-hand side.
The Billing account type on the properties page determines the type of your account. It can be Microsoft Online Service Program, Enterprise Agreement, Microsoft Customer Agreement, or Microsoft Partner Agreement. To learn more about the type of billing accounts, see View your billing accounts in Azure portal.
If you have access to multiple billing scopes, check the type in the Billing account type column.

If you have questions or need help, create a support request.

Next steps

Users in other roles, such as Owner or Contributor, can access not just billing information, but Azure services as well. To manage these roles, see Assign Azure roles using the Azure portal.
For more information about roles, see Azure built-in roles.