I have two Azure Cloud Solution Provider subscriptions and Azure DevOps project created around two/three years ago when it was called Visual Studio Team Services. DevOps resources (organization and project) reside on Azure for billing purposes. I want to move DevOps resources to new subscription, but cannot because of insufficient permissions - I'm missing AccountSubscriptionChange permission - how do I get it? I granted myself all permissions available in DevOps.
Create service desk ticker for Microsoft Azure support.
Related
I am an owner of an Azure DevOps Organization - e.g. "lab.visualstudio.com". We are planning to decommission our Azure subscription. I try to find out if the decommission will affect my Azure DevOps Org.
I can see "lab.visualstudio.com" is connecting to my Azure subscription for billing purposes. However, I could not find "lab.visualstudio.com" in my Azure portal.
Is there a way to determine if "lab.visualstudio.com" belongs to one Azure subscription? In other words, how can I know if decommissioning my Azure subscription will also decommission my Azure DevOps Organization?
Thanks in advance!
Notes: I saw someone's Azure portal has their Azure DevOps Organisation on it (screenshot attached). I am wondering why mine does not show in my Azure portal.
Is there a way to determine if "lab.visualstudio.com" belongs to one
Azure subscription?
To find the Azure Subscription associated with your Azure DevOps organization, login into Azure DevOps, go to Organization Settings and then Billing. You will see the Azure Subscription used for billing of Azure DevOps organization.
You can then go to Azure Portal and navigate to the subscription and look under resources. You should see a resource by the name lab (or the name of your Azure DevOps Organization) of type Azure DevOps organization there.
In other words, how can I know if decommissioning my Azure
subscription will also decommission my Azure DevOps Organization?
Azure DevOps uses an Azure Subscription for billing purposes. If you delete the Azure Subscription that is associated with your Azure DevOps organization, your Azure DevOps organization will be immediately moved to "Free Tier". Though I have not tried it but I believe that the resources you have created in your Azure DevOps organization will not be deleted. I'm not sure what would happen if you have provisioned resources more than allowed in free tier.
You can read more about it here: https://learn.microsoft.com/en-us/azure/devops/organizations/billing/billing-faq?view=azure-devops#what-happens-if-i-delete-my-organization-resource--.
We're planning on migrating our TFS on premise to Azure DevOps. I understand that to migrate, we need Azure AD. My question is, what would be the subscription level should I get?
I'm fairly new to this so please go easy on me. Thanks!
Do you mean Azure Subscription?
DevOps doesn't requires Azure Subscription. But if you anticipate needing to purchase any additional user plans, build/deployment pipelines, hosted build services, hosted load test services, or other developer services, we highly recommend making sure that you have an Azure Subscription ready for linking to your imported Azure DevOps Services organization once the import has completed.
You could refer to the migration guide first, which can be downloaded from website below:
https://azure.microsoft.com/en-us/services/devops/migrate/
I understand how to create a new DevOps project from https://portal.azure.com and I see how that creates a new DevOps organisation or reuses an existing one (scoped to that AzureAD).
A new project is also created as well as an associated WebApps project.
These are my challenges:
When one creates a new Project in that DevOps organisation, it doesn't show up for management in https://portal.azure.com. How can one ensure the resources consumed by that project are part of the Azure Subscription to which the parent organisation is tied? Or is that the default?
What is the easiest way of tying existing DevOps organisations and projects to an Azure subscription to allow increasing the default 5 user limit and consuming more pipeline resources?
There doesn't seem to be any documentation anywhere that directly addresses these issues for me.
You may use Azure DevOps Organizations to connect your azure subscription with devops account:
Then you may use users on Azure DevOps from Azure Active Directory and manage billing (get more license):
Also you may use DevOps Project wizard to create a team project from a template:
Additional links:
Quickstart: Set up billing for your organization
Azure DevOps Projects
Tutorial: Connect your organization to Azure Active Directory
Quickstart: Pay for more Basic users
About access levels
I have 1 VSTS instance, which is currently linked to 1 Azure Subscription. Now we have two Azure subscriptions:
One for Production applications.
One for Sandbox applications, where we develop applications.
Now I want to setup a develop CI build that links to our Sandbox and another master build for production releases to our Production subscriptions.
So I have two subscriptions linked to my Azure AD account:
When I look in my Team Services accounts in Azure its only linked to the Production account:
Can I link one VSTS instance to multiple Azure subscriptions that my account is linked to? These subscriptions are linked to one Azure AD account.
What you're looking at has nothing to do with what Azure resources you can and cannot deploy to -- this is just for Azure AD connectivity and for billing purposes.
You set up your Azure subscriptions for continuous delivery by creating Service Endpoints in VSTS.
We have a Visual Studio Team Services instance that is used by the company I work for.
The company has an Azure instance. As far as I am aware there is no connection to VSTS.
When I was added to VSTS as a Visual Studio Pro level user some months ago we had to use my Microsoft Account as we couldn't use my work identity because my MSDN subscription is linked to my Microsoft Account as we could not link it to my work identity; apparently this was because we use Office365 in the office.
We now have problems adding Basic Users to VSTS. I enter the users Microsoft Account identity and I am told "No Identities Found".
I looked at VSTS Settings where I can see "This account is backed by the Default Directory Azure Active Directory."
I can also see an "Azure Subscription ID". When I follow the Subscription ID link I end up at my Microsoft Account Azure instance.
I had other users log in to VSTS and they too are seeing my Azure Subscription ID in VSTS Settings.
Why is this happening?
How do Azure instances/accounts relate to VSTS instances/accounts
Can I break the link between Azure and VSTS
You can link your VSTS account to the azure from your azure portal:
Azure - VSTS service
Then, what we do is to add the users to the Azure active directories. As far as I know, these users must be registered in Microsoft.
Once it's done, you can add the users to the VSTS.
Hope it helps you.
The Team Services uses an Azure subscription to bill purchases and can control access with Azure AD.
You can unlink your VSTS account from Azure portal. More information, you can refer to this article: Delete or recover Visual Studio Team Services account
I am an idiot.
Turns out the company VSTS was linking to the company Azure.
I became confused when clicking the Manage button in VSTS | Azure Subscription ID.
That took me to the Sign in to Azure page and displayed my login, which takes me my Azure.
It was only when we checked the Azure Subscription ID in VSTS against my Azure Subscription ID that it became apparent I was following a red herring. The ID matched the companies Azure ID. So I can use that to add users and subsequently add them to VSTS.