...
To onboard with Yotascale, you need to have an Azure Portal user that has Reader and Data Access (or superior role) to the Subscription where the Billing Export files are stored.
Yotascale only needs to read Export Files that are created by Azure daily. No user credentials are stored. We only persist the containers keep that allow to read reading the Export files.
The Export files need to be two: one for Actual cost and one for Amortized cost. These need to be schedule scheduled for “daily export of month-to-date costs”.
...
Resource | Role (any of these will work) |
---|---|
Subscription where the Export files are stored |
|
Billing Account | Enterprise Administrator |
Please note that for the Subscription Reader is not enough because that Role does not give access to the Cost Export Files.
To access the Export files the roles in the table are the only option. This is information is clarified in this Azure document, which shows the roles needed to access the keys to the Storage Blob Data.
To create Export files for an EA account, you need to have an EA admin role. These are the steps to give a user an Enterprise Administrator role.
Setup Permissions to access the Azure Subscription where the Export files are stored
...
For the Subscription where the Export Files are storesstored:
Open the Subscriptions page from Search or Menu:
Click on the Subscription you want to add
Click on Access Control (IAM)
Click on “+ Add” to add a Role
Add the “Reader and Data Access” Role or a Superior Role. Select the user you want to add
Save it and you’re done with Subscription Permissions
Register the Resource Provider for the Azure Subscription where you want to store Cost Export files to allow for CostExport
It may happen (because of security company policy) that the Azure Subscription where you will create Export files is not registered to allow the Export service to run.
If that is the case, you will see an error stating that the Resource is not Registered.
you need to then Register the export service.
From Subscription - Resource Providers, go and “Register” the “Microsoft.CostManagementExports” and “Microsoft.CostManagement” as in this screenshot:
...
Setup Daily Usage and Purchase Export Files for Actual and Amortized Billing
...
You can also follow this Azure video or the instructions from this Azure tutorial page.
You do need to have an Enterprise Administrator role to be able to create these cost Exports. This is how that role is assigned.
Go to your Cost Management and Billing in your Azure account that you want to onboard with Yotascale
Click in the Billing Account you want to onboard with YotascaleClick on “Cost Management”
Next click on “Configuration”
Click on “Exports”
Click on Exports on the left menu at the bottom:
Click on “+ Add” to create a new Export
Give it a name, e.g. “yotascale-daily-actual”
Make sure you select “Daily export of month-to-date costs”
Click on “Next”
Fill out the Storage. First, select the Subscription where the Exports will be stored to daily.
Make sure you fill out all information. These are some examples
Or you may see this screen, depending on your EA version:
Then click on “Next”. You will see a summary, and then click in “Create”
Repeat these steps to create the “Amortized “Amortized Costs”
Yotascale Side Steps to Onboard Your Azure Subscriptions
Login to your Yotascale account as an “Admin”
Go to Settings - Manage Connections
Click on “Add Account” and select Azure EA:
Click on:
Sign in with the same user mentioned above in the Azure-Side Prerequisites section
You may get a popup to confirm your Azure Active Directory:
It is possible that you get a “Token Renewal Failed”. In that case, you need to click on Get Token:
Select the account which you want to onboard to Yotascale (once we have a token, we will fetch your the list of Subscriptions and respective storage accounts)
Next, you need to enter the details as highlighted here:
Select the correct Subscription ID from the respective drop-down - this is the Subscription where the Export are is being stored.
Some of the fields are discovered:
Subscription ID
Storage Account Name
Container Name
Resource ID
Some field fields you need to copy/paste them from your Azure Portal. They must match. We cannot discover them because Azure does not provide a public API for it
Cost Export Name
Directory Name
Hit save and you are done.