Onboarding Azure Accounts to Yotascale™ Software
To onboard your Azure accounts with Yotascale, we need to make sure your Azure account type meets the minimum criteria, and that you have a user available with the required roles.
Note: we will ask you to log in to your Azure console from the Yotascale Azure onboarding. We are not storing your credentials. All we need is to get access to your Cost Export Files. The login is to allow us to be able to get access to the Storage Keys for the Container where the Cost Export Files are saved.
Summary of the Steps to Onboard Your Azure Subscriptions
To onboard with Yotascale, you need to have an Azure Portal user that has Reader and Data Access (or superior role) to the Subscription where the Billing Export files are stored.
Yotascale only needs to read Export Files that are created by Azure daily. No user credentials are stored. We only persist the containers keep that allow to read the Export files.
The Export files need to be two: one for Actual cost and one for Amortized cost. These need to be schedule for “daily export of month-to-date costs”.
Azure-Side Prep Work
Prerequisite 1: Azure account type
Your Azure account must be of the type: EA (Enterprise Agreement). If you have an MCA (Microsoft Customer Agreement) you need to follow the steps from this guide.
We need to be able to access the Cost Export Files in order to get resource usage and costs. If did not yet enable cost Export files this document shows how you can do it.
Prerequisite 2: Azure user that will be used to enroll with Yotascale
These are the roles that are needed for your Azure Billing Account and Subscriptions.
Please note that the roles are done on a per Subscription level and as such you need to have access to each of your Subscriptions to onboard them with Yotascale.
Resource | Role (any of these will work) |
|---|---|
Subscription where the Export files are stored |
|
Please note that for the Subscription Reader is not enough because that Role does not give access to the Cost Export Files.
To access the Export files the roles in the table are the only option. This is information is clarified in this Azure document, which shows the roles needed to access the keys to the Storage Blob Data.
Setup Permissions to access the Azure Subscription where the Export files are stored
If the user still does not have Reader and Data Access (or a superior Role) to your Subscriptions, please follow these steps.
For the Subscription where the Export Files are stores:
Open the Subscriptions page from Search or Menu:
Click on the Subscription you want to add
Click on Access Control (IAM)
Click on “+ Add” to add a Role
Add the “Reader and Data Access” Role or a Superior Role. Select the user you want to add
Save it and you’re done with Subscription Permissions
Setup Daily Usage and Purchase Export Files for Actual and Amortized Billing
You need to have Daily Export Files for Usage and Purchase enabled per Subscription so that Yotascale can read your usage and costs details.
For each of your Subscriptions follow these steps to enable the Export Files, in case you have not done it yet.
If you do actually already have created Export, but you see an error showing that we cannot read them, then it is because your IAM Role to the Subscription does not allow us to programmatically read from your Export files.
Please make sure you have one of these permission Roles to your Azure Subscription by following these steps.
Resource | Role |
Subscriptions |
|
To create Export files for a Subscription, you can either follow the steps highlighted below or follow the steps from this Azure guide to creating such an Export.
This needs to be done for both:
Actual cost (Usage and Purchases) - Select to export standard usage and purchases
Amortized cost (Usage and Purchases) - Select to export amortized costs for purchases like Azure reservations
These are the steps to enable the Cost Export Files for a Subscription:
You can also follow this Azure video or the instructions from this Azure tutorial page.
Go to your Cost Management and Billing in your Azure account that you want to onboard with Yotascale
Click in the Billing Account you want to onboard with Yotascale
Click on Exports on the left menu at the bottom:
Click on “+ Add” to create a new Export
Give it a name, e.g. “yotascale-daily-actual”
Make sure you select “Daily export of month-to-date costs”
Click on “Next”
Fill out the Storage. First select the Subscription where the Exports will be stored to daily.
Make sure you fill out all information. These are some examples
Then click on “Next”. You will see a summary, and then click in “Create”
Repeat these steps to create the “Amortized Costs
Yotascale Side Steps to Onboard Your Azure Subscriptions
Login to your Yotascale account as an “Admin”
Go to Settings - Manage Connections
Click on “Add Account” and select Azure EA:
Click on:
Sign in with the same user mentioned above in the Azure-Side Prerequisites section
You may get a popup to confirm your Azure Active Directory:
It is possible that you get a “Token Renewal Failed”. In that case, you need to click on Get Token:
Select the account which you want to onboard to Yotascale (once we have a token, we will fetch your the list of Subscriptions and respective storage accounts)
Next you need to enter the details as highlighted here:
Select the correct Subscription ID from the respective drop-down - this is the Subscription where the Export are being stored.
Some of the fields are discovered:
Subscription ID
Storage Account Name
Container Name
Resource ID
Some field you need to copy/paste them from your Azure Portal. They must match. We cannot discover them because Azure does not provide a public API for it
Cost Export Name
Directory Name
Hit save and you are done