Skip to main content

Connect Azure to Eco

You can connect your account to Eco to get estimated cost savings analysis if you have one of these account or agreement types:

  • Azure Enterprise Agreement (EA)
  • Microsoft Customer Agreement (MCA)
  • Microsoft Online Services Program (MOSP)/pay as you go (PAYG)

Cloud Solution Provider (CSP) users need to contact Support.

You can read the FAQs. The Eco Azure team can help you to set up the registered application and transfer the application credentials.

Prerequisites​

  • Review read-only permissions required for the Eco cost specialist team.
  • The Azure user must be a global administrator with elevated access and access to the management groups or subscriptions.
  • The Azure user must be an enterprise administrator (EA) or billing account owner (MCA).
  • A member account only. The account cannot be a guest user account.
  • A registered Spot account.

Connect Cloud Account​

  1. In the Spot console, click Eco > Microsoft Azure > Azure Billing Account.

  2. Select the onboarding type:

    • Automated onboarding is the quicker option. The Microsoft Application Consent process allows Eco Azure to build the app registration on your behalf and use your credentials.
    • Manual onboarding lets you use higher security requirements when needed:

      1. Register an application in Microsoft Entra ID. Select Accounts in this organizational directly only, without a redirect URI.

      2. Create a new client secret. Save the secret key and its expiration date.

        note

        Save the secret key because it won't be displayed again after you leave this page.

  3. For EA only, assign the EnrollmentReader role to the registered application using a Microsoft API.

    Sample header input and body of API call
    Header Inputs: 
    billingAccountName: <enrollment id> 
    billingRoleAssignmentName: <A unique GUID you generate, see https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/new-guid> 
    Example of body for API call: 
    { 
    "properties": { 
    "roleDefinitionId": "/providers/Microsoft.Billing/billingAccounts/<insert enrollment number>/billingRoleDefinitions/<insert GUID>", 
    "principalTenantId": "<insert Tenant ID>", 
    "principalId": "<insert Object Id of the service principle>"        
    } 
    }

  4. For MCA only, add the billing account reader role to the registered application.

  5. Assign the cost management reader role to the registered application on the management groups or subscriptions you want to manage (the management groups/subscriptions you want Eco Azure to purchase reservations).

  6. For PAYG only, assign the reservation reader role to the registered application.

    1. Go to the Reservations page > Role assignments > Add role assignment.
    2. Search for and select Reservation Reader, then click Next > Select Members.
    3. Search for and select the Eco Azure registered application, then click Review + Assign.

  7. In the Spot console, in the App Registration page, enter the Application ID, Tenant ID, Application Secret Value and Expiration date and click Connect.