Onboarding Azure Accounts to Yotascale™ Software

To onboard your Azure accounts with Yotascale, we need to make sure your Azure account type meets the minimum criteria, and that you have a user available with the required roles. 

Note: we will ask you to log in to your Azure console from the Yotascale Azure onboarding. We are not storing your credentials. All we need is to get access to your Cost Export Files. The login is to allow us to be able to get access to the Storage Keys for the Container where the Cost Export Files are saved.

Azure-Side Prep Work

Prerequisite 1: Azure account type

Your Azure account must be of the type: MCA (Microsoft Customer Agreement).
We need to be able to access the Cost Export Files from each of your Azure. Subscriptions in order to get resource usage and costs. If did not yet enable cost Export files for your Azure Subscriptions, this document show shows how you can do it.

Prerequisite 2: Azure user that will be used to enroll with Yotascale

The Azure User that will be used to onboard with Yotascale must have these roles:

• Owner (can view/manage everything, including cost configuration)  

• Contributor (can view/manage everything, including cost configuration, excluding access control)  

• Cost Management Contributor (can view/manage cost configuration) 

Additionally, the Azure User that will be used to onboard with Yotascale must have one of the following Azure Active Directory roles in your organization: 

These are the roles that are needed for your Azure Billing Account and Subscriptions.
Please note that the roles are done on a per Subscription level and as such you need to have access to each of your Subscriptions to onboard them with Yotascale.

Please note that for the Subscription Reader is not enough because that Role does not give access to the Cost Export Files.

Prerequisite 3: Azure user needs to have Role access to Subscriptions and Billing Accounts

For each Subscription, the minimum Role needed is: Reader and Data Access
For the Subscription Billing Account, the minimum role is: Billing Reader
Theuser that will be used to onboard your Azure account with Yotascale needs to have the role of “Billing profile owner”.

If the user needs do not have these Azure Roles yet, follow these steps:

For each Subscription:

1. Open the Subscriptions page

2. Click on Access Control (IAM)

3. Click on +Add

4. Search for Role “Reader and Data Access”

5. Search for the Azure user that will enroll with Yotascale

6. Save

For the Subscription Billing Account do:

1. Open the Subscription

2. Click on Billing Profiles

3. Click on the Billing Account

4. Click on Access Control (IAM)

5. Click on +Add

6. Select the Billing Reader

7. Search and select the respective user that will onboard with Yotascale

8. Click on Save

Prerequisite 4: Azure Storage Account Permissions and Settings

Your Azure Storage Account needs to: 

• Have "write" permissions required to change the configured storage account (regardless of permissions on the export) 

• Be configured for blob or file storage. If possible, we recommend creating a new storage account dedicated to the cost management data with Yotascale

Setup an Azure Storage Account and Export Daily Usage and Cost Files

For each account, you need to onboard with Yotascale follow the following steps.

Please login to your Azure account with the user-defined in the “Prerequisite 2” above.

Then go and create a scheduled daily export under Cost Management in case you do not have created it already. Follow this Azure guide to create such an Export. 

This needs to be done for both:

• Actual cost (Usage and Purchases) - Select to export standard usage and purchases

• Amortized cost (Usage and Purchases) - Select to export amortized costs for purchases like Azure reservations 

These are the steps to enable the Cost Export Files for a Subscription:

1. Go to your Cost Management and BIlling in your Azure account that you want to onboard with Yotascale
   

   

2. Click in the Billing Account you want to onboard with Yotascale

3. Click on Exports on the left menu at the bottom:

4. 

5. Example of what it looks like:
   

   

Yotascale-Side Steps

1. Login to your Yotascale account as an “Admin”

2. Go to Settings - Manage Connections

3. Click on “Add Account” and select Azure:

   

4. Click on:

   

5. Sign in with the same user mentioned above in the Azure-Side Prerequisites section

6. You may get a popup to confirm your Azure Active Directory:

   

7. It is possible that you get a “Token Renewal Failed”. In that case, you need to click on Get Token:

   

8. Select the account which you want to onboard to Yotascale (once we have a token, we will fetch your Billing Account info)

9. Select the correct Billing Profile  from the respective drop-down 

10. Select the correct Subscription ID from the respective drop-down 

11. The form will be auto-populated

12. Verify the location of your Export Files is correct and click the 'Save' button.

13. This is a screenshot of an example you should see before you Save the account connection: