We have a brand new (as in, created a couple of days ago and no resources in it yet) Azure pay-as-you-go subscription, and now when I try to provision something, I'm not allowed.
Looking at the subscription in the portal, under "Usage + quotas" the list is empty.
Did we do something wrong when signing up? How do we enable it?
You only need to register to the Microsoft.Compute Resource Provider on the Subscriptions Blade.
Go to Subscriptions
Select the desired subscription
Click on Resource Providers
Register to the option "Microsoft.Compute"
Turns out there were some things I could do myself on this, and some things I had to turn to Azure Support for.
Thing I could do myself: Enable a bunch of resource providers
It turned out the subscription did not have a single resource provider enabled. To fix, I found the Subscription blade, and clicked the "Resource Providers" menu item (toward the bottom). That opened up a list where I could register lots of stuff. This also enabled corresponding quotas on the subscription.
Thing I couldn't do myslef: Increase e.g. VM quotas
Some of those quotas, however, I wasn't able to figure out how to turn on myself. Crucially, one of them was for provisioning VM:s (including "hidden" ones, e.g. the underlying VM:s in an AKS cluster or an App Service). Thankfully, Azure Support were really responsive and from first contact until I was able to provision stuff took less than a business day.
Related
Days ago I onboarded a customer using Service Principal with an ARM template in our blob storage, then the client went to this URL:
https://portal.azure.com/#create/Microsoft.Template/uri/{Blob Url}, accepted us as their resource manager, and we could make connections and go-to resources but via PowerShell, why it doesn't show to us in our Azure Lighthouse Customers page?
I can work with the resources, make deployments, and such but doesn't show in the list, I want to know if it is because we need to be gold competency or an expert MSP because we don't want to make a public offer in the market, we just want to manage certain customers.
It should be displayed there. No special conditions are required such as the ones you've mentioned. Are you definitely signed in to your own partner/MSP tenant with an account that has delegated access to the customers? Does anything show up under delegations within the Azure Lighthouse section?
If you have access to the customer tenant, does your company show up under Service Providers within Azure Lighthouse on the Azure portal?
Case closed, the Service Principal itself doesn't have the privileges on the service provider's tenant to make your user a reader. So the solution for this was:
Remove the offer in the customer tenant.
Add new authorization in the ARM template for a user/group with "Reader" built-in role id. (In our case, we decided to use an AD group because people in the organization is temporary)
Upload the new ARM template and re-onboarded the client.
After a couple of hours, the client's subscription showed in the subscription list in the section: Directories + subscriptions, checked it, and saw all the resources from the service provider's tenant.
I found a solution for this issue.
The Azure Lighthouse->My customers list on the azure portal only shows subscriptions activated in the global directories and subscription filter.
Please go to the global directories and subscriptions filter (in the portal top navigation) and open the drop downs for directories and for subscriptions and check, if your customer subscription appears here.
If yes, select all entries in both drop downs.
After that go back to Azure Lighthouse->My customers
and check, if the customer subscription appears now.
A company that we hired to develop or software created an azure account where they have our database, API, etc. Recently we decided to have our own azure account and our plan is to move all the resources that are on the vendor azure account to our own.
It is possible to move all the services from the vendor account to ours? if so can you guys point me in the right direction?
The boundary for resources in Azure is the "Subscription". All you need to do is change the subscription for the resources.
In the Azure Portal, select the Resource Group with the resources that you want to move to your control. Then change the Subscription ID to yours.
You cannot move all types of resources. Some you will need to recreate. This link provides more details:
https://learn.microsoft.com/en-gb/azure/azure-resource-manager/resource-group-move-resources#services-that-enable-move
I have two Azure Subscriptions, Enterprise and MSDN subsciptions. I want to transfer a resource group from one subsciption to another. Already found this method but it requires to change the tenant of one of the subscriptions. How to move resources from subscriptions in different directories in Azure
These accounts have different active directories (Cannot Change Directory). So essentially the tenantid remains different.
Official Docs also mentions this way https://azure.microsoft.com/en-in/documentation/articles/resource-group-move-resources/
Is there any alternate methods to move the RG?
I think there is no alternate method to move the RG. What you can do as a Workaround is to try to download the Automation Script (ARM template) for your Resource Group, delete the RG and deploy the template to your new subscription. But this only works for services that uses the Resource Manager (not Service Manager).
Also this only creates the services / infrastructure but you probably have to redeploy content depeding on which resources you are using.
Someone mentioned this can be done by contacting the support.
I found that its possible in some scenarios to do this by moving the resource group to a new/temporary subscription, and then transferring ownership of that subscription to the desire account. It doesn't matter if the account is on a different domain or not, however not all resource types can be transferred (e.g. Azure role-based access control assignments).
https://learn.microsoft.com/en-gb/azure/cost-management-billing/manage/billing-subscription-transfer?WT.mc_id=Portal-Microsoft_Azure_SubscriptionManagement
I am trying to learn how to use Azure's web app services to set up a custom domain, but I am getting a consistent issue with it think I don't have a paid subscription. I am on the "Shared" service level and have a Pay-As-You-Go subscription, yet when I try to click the "Buy Domains" button in the Web App dashboard for my application it automatically shows me a screen "To buy a custom domain, you must have a paid Azure subscription." I have been try to refresh and reconfigure all the options related to my subscription, but it won't seem to let me buy a domain. Are the subscriptions I have not sufficient to do this?
I experienced the same problem. I had just signed up for a new azure account and then converted my subscription from free-trial to pay-as-you-go. Somehow this doesn't propagate correctly because the subscription still showed the free trial credit. I filed a ticket with MS Support, and received an actual phone call back from a support person. They resolved it behind the scenes. Credit disappeared, but my subscription was successfully now showing pay-as-you-go in the portal.
Successfully buying a domain through the portal is another challenge though.
Are you the Service-Admin or Co-Admin?
It might be an operation only Service-Admin can execute.
A couple of clients gave me access to their Azure subscriptions so that I could do work for them. The work has been completed and I asked them to remove my permission from their subscriptions.
They have done this but for some reason their subscriptions still show up in my list of available subscriptions when I click on my profile in the top right of the Azure Portal.
I can click on one of the subscriptions and switch to it, but I cannot see any of their resources, or create new ones. This confirms that I do not have permissions for that subscription anymore.
So if my access has been removed, which is it still showing up in the list of subscriptions which are available to me? Is there any way I can remove it from the list?
Thanks :)
It is not possible at the moment.
The link here shows a reply from Azure customer care.
Greetings from Microsoft Azure. I reviewed your request and would like
to mention that there is unfortunately no option to remove the
disabled subscription from the Azure portal. This is by design to
enable customer’s view the subscriptions purchased by them right from
the day the Azure account was created.
This means you are still a member of the directory (even though you are no longer an admin of anything). You can ask the administrator of the directory to remove you.
You should also upvote this suggestion: https://feedback.azure.com/forums/223579-azure-portal/suggestions/13327620-remove-old-directories
If you are a co-admin you can remove yourself by navigating to Settings->Administrators->Select->Remove from the classic portal (old)