Setup Permission for the Azure Billing Account

For each Billing Account, you want to enroll, ask your Azure Admin to:

1. Open the Billing Account by opening the “Cost Management + Billing” Click on

2. Image Added

   Open the “Billing Account” you need access to, in this example the “Yotascale, Inc.”

3. Image Added

   Click in Access Control (IAM)

4. Add the user with the role of “Billing profile owner”

5. NOTE: if you don’t see a Billing Profile, you need to enable it from the Subscription side:

6. Go to “Subscriptions”

7. Open the subscription you want to enable with Yotascate by clicking on its name (if you have more than one)

8. Click on the Settings - “Billing properties”

9. Click on the link in front of “Billing profile”

10. Click on “Access control (IAM)”

11. Add the user the use that will onboard with Yotascale with the Role of ” Billing profile owner” or “Billing profile reader”

Prerequisite 4: Azure Storage Account Permissions and Settings

Your Azure Storage Account needs to: 

• Have "write" permissions required to change the configured storage account (regardless of permissions on the export) 

• Be configured for blob or file storage. If possible, we recommend creating a new storage account dedicated to the cost management data with Yotascale

Setup an Azure Storage Account and Export Daily Usage and Cost Files

For each account, you need to onboard with Yotascale follow the following steps.

Please login to your Azure account with the user-defined in the “Prerequisite 2” above.

1. Image Added

   Click in “Add +” and add the Role of “Billing Account Reader” to the user that will onboard with Yotascale

2. Image Added

3. Save and you’re done with the Billing Account

Setup Permissions to each Azure Subscription

If the user still does not have Reader and Data Access (or a superior Role) to your Subscriptions, please follow these steps.

For each Subscription:

1. Open the Subscriptions page from Search or Menu:

2. Image Added

   Click on the Subscription you want to add

3. Image Added

   Click on Access Control (IAM)

4. Click on “+ Add” to add a Role

5. Add the “Reader and Data Access” Role or a Superior Role. Select the user you want to add

6. Image Added

7. Save it and you’re done with Subscription Permissions

Register the Resource Provider for the Azure Subscription where you want to store Cost Export files to allow for CostExport

It may happen (because of security company policy) that the Azure Subscription where you will create Export files is not registered to allow the Export service to run.

If that is the case, you will see an error stating that the Resource is not Registered.

you need to then Register the export service.

From Subscription - Resource Providers, go and “Register” the “Microsoft.CostManagementExports” and “Microsoft.CostManagement” as in this screenshot:

Image Added

Setup Daily Usage and Purchase Export Files for Actual and Amortized Billing

You need to have Daily Export Files for Usage and Purchase enabled per Subscription so that Yotascale can read your usage and costs details.

For each of your Subscriptions follow these steps to enable the Export Files, in case you have not done it yet.
If you do actually already have created Export, but you see an error showing that we cannot read them, then it is because your IAM Role to the Subscription does not allow us to programmatically read from your Export files.

Please make sure you have one of these permission Roles to your Azure Subscription by following these steps.

To create Export files for a Subscription, you can either follow the steps highlighted below or follow the steps from this Azure guide to creating such an Export. 

This needs to be done for both:

• Actual cost (Usage and Purchases) - Select to export standard usage and purchases

• Amortized cost (Usage and Purchases) - Select to export amortized costs for purchases like Azure reservations 

These are the steps to enable the Cost Export Files for a Subscription:

1. Go to your Cost Management and BIlling in your Azure account that you want to onboard with Yotascale
   

   Image Added

2. Click in the Billing Account you want to onboard with Yotascale

3. Click on Exports on the left menu at the bottom:

4. Image Added

5. Example of what it looks like:
   

   Image Added

After you save, you’re done with Export Files. Remember you need to do this for the two types of billing data (Actual and Amortized).

Yotascale Side Steps to Onboard Your Azure Subscriptions

1. Login to your Yotascale account as an “Admin”

2. Go to Settings - Manage Connections

3. Click on “Add Account” and select Azure - MCA:

   Image Removed
4. Image Added

5. Click on:

   

6. Sign in with the same user mentioned above in the Azure-Side Prerequisites section

7. You may get a popup to confirm your Azure Active Directory:

   Image RemovedImage Added

8. It is possible that you get a “Token Renewal Failed”. In that case, you need to click on Get Token:

   

9. Select the account which you want to onboard to Yotascale (once we have a token, we will fetch your Billing Account info)

10. Yotasale will verify that this user can read from the Billing Account, Subscription, and Export Files. If the user does have the Roles with Permission to access these resources, the user is not ready to onboard the account and needs to go back to the pre-requisites section in this document to get those Role Permissions:

11. Image Added

12. Select the correct Billing Profile  from the respective drop-down 

13. Select the correct Subscription ID from the respective drop-down 

14. The form will be auto-populated

15. Verify the location of your Export Files is correct and click the 'Save' button.

16. This is a screenshot of an example you should see before you Save the account connection: