>> [MUSIC].
>> Hi, and welcome to our ongoing video series
on Azure Cost Management.
Today we will go over steps to assign
access to view your cost and charges in Azure Cost Management.
My name is Raphael Chacko
and I'm with the Azure Cost Management Team.
Let's start by quickly talking about
Role Based Access Control or RBAC for short.
This is an authorization system built to grant
access to the appropriate roles to Azure resources.
The table above shows
the RBAC rules applicable for cost management.
Cost Management Reader and Cost Management Contributor
are two noodles that have been created for Azure Cost Management.
These RBAC roles can be applied to
the following scopes in Azure Cost Management.
Let's take a look at
a sample hierarchy and access management in action.
In this example we have
a multi-level management group
with some subscriptions at the leaf level.
Carol is a user who has been granted
cost management contributor role to the Root Management Group.
So she has access to
all the subscriptions in this management group hierarchy.
But as John has been granted access to a note in
the management group hierarchy and will have
access to the two subscriptions under that note.
Jane on the other hand has been granted
access to view cost for a single subscription.
RBAC access can be granted in
the Azure portal by selecting
the scope that you want to grant user access to.
Let's see how we would grant
Jane access to a specific subscription.
In the Azure portal I will select
the subscriptions blade and then select
the appropriate subscription that I want to grant Jane access to.
In the menu item on the subscription select "Access Control".
This brings up the access control blade.
I click on "Add' and this brings up
the Role Assignment blade where I can
then select the appropriate Role.
In this case I want to select Cost Management Reader or
Cost Management Contributor and
enter the other details and hit "Save".
In this way Jane has been granted access to
that specific subscription and she can view
costs and charges in the Cost Management Blade.
Granting this RBAC access should work for
Web direct offers like Pay as you go,
Visual Studio Enterprise or Azure in open.
Enterprise customers with a Microsoft Azure enterprise offer
or enterprise Def test offers,
can also view data in the Cost Management Blade
with some additional scopes like Billing Account if you are
an enrollment admin or department if you're
a department admin or
enrollment account if you are an account owner.
You can select these scopes in
the scope picker in cost management.
However, it is important to note that there is
a prerequisite before users can view cost
and charges in cost management for enterprise users.
You can refer to the table here for a list of the prerequisites.
But we will also talk about this
in a little bit more detail in the next slide.
The enrollment admin must enable in
the EA portal the department admin view charges
and the account owner view charges flags for users to see
charges as defined in the table in the previous screen.
If these flags are disabled users will see
the following error message in
Cost Management when trying to access costs.
If the flags are enabled but the user
does not have access to the scope they are trying to view,
they will also see the following error which lets them
know that they need to go grant access
to the appropriate scope that they want to view.
As always, thanks for watching this video and here are us
some additional helpful reference links on this topic. Thank you.
>> [MUSIC]