2

We are currently moving our on-premise applications to Azure. Our department received a Resource Group in our companies tenant. We are able to create new resources within the RG, however we are not able to see the associated costs after we created the resource.

Desired result: overview of current resource costs and rate of spending for our department

Currently only the head of internal IT is able to view the spending per department.

Screenshot of Resource costs tab in Resource Group

Is it possible for the global administrator to delegate the rights for viewing Resource Group costs to a department?

Koen
  • 475
  • 4
  • 17

2 Answers2

1

Unfortunately, in Resource Access control(IAM), I add all Roles to the user account, and the user account still can't read "Resource costs".

Is it possible for the global administrator to delegate the rights for viewing Resource Group costs to a department?

If you want to get the right to read the resource group costs, we can specify a co-administrator for subscription, in this way, we can read resource costs. More information about add a co-administrator for subscription, refer to the link.

Jason Ye
  • 13,710
  • 2
  • 16
  • 25
  • Thank you for your reply @Jason. Using the **co-administrator** user role would give us access to way more Resource Groups and functionalities than necessary. This is unacceptable in regards to our security regulations. – Koen Feb 15 '17 at 10:15
  • 1
    @KoenUbbink we can't use normal account to see the billing data for now, only the Account Administrator has permission to get to the billing data and usage information. Maybe we can recommend to the global administrator to send you the resource costs every week. – Jason Ye Feb 16 '17 at 08:25
  • We will look into connecting Power BI to the Azure billing info. Do you have a content pack available? – Koen Feb 16 '17 at 08:59
  • https://powerbi.microsoft.com/en-us/documentation/powerbi-content-pack-azure-enterprise/ – Jason Ye Feb 16 '17 at 09:06
0

There is a new role added to Azure, Azure Billing Reader role.

The new Billing Reader role allows you to delegate access to just billing information with no access to services such as VMs and storage accounts. More info.

Billing Reader role; Overview of Subscription

Koen
  • 475
  • 4
  • 17