Resource subscription in azure

NAVARAJAN A/L SUBRAMANIAM 51 Reputation points
2022-05-12T07:46:31.267+00:00

Hello Good day everyone. I am new to this azure cloud platform. There is one question regarding the azure active directory id. Currently, I have one organization id which ending in 'onmicrosoft.com'. This id have subscription to azure active directory premium 2.

So now, I want to create a resource in azure using the id. Unfortunately, I can't create the resource due to subscription. I'm unable to create subscription also. I saw all the documentation but I can't understand what's going on with this id. If someone know regarding this please help. Thank You.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,465 questions
0 comments
Accepted answer
  1. Shashi Shailaj 7,581 Reputation points Microsoft Employee
    2022-05-12T09:27:54.127+00:00

    @NAVARAJAN A/L SUBRAMANIAM ,
    Thank you for your query . Welcome to Q&A community forum . I understand that you are trying to create a resource in Azure subscription and you do not see any azure subscription . Let me provide you more clarification on this.

    We have Azure VM and other IaaS service which I believe you are trying to create but it wont work unless you have an azure subscription associated with the directory . Azure Active directory acts as a Identity control plane which is user store for any organization . If you have experience with on-premise Active directory or directory service of any kind then you can consider the Azure AD as similar to the user store and authentication service in the cloud which provide authentication services and user directory services to every component in Microsoft Cloud.

    Every Azure Active directory has a tenant ID and tenant name . Tenant name will always be in the format [xxxxxxxx].onmicrosoft.com and tenant Id will be in a GUID format . It is a unique ID which represents your azure active directory instance in the azure AD public cloud. The Azure Active directory has different types of licenses which can be associated with this service. The same directory instance can be access from Azure portal as well as Microsoft 365 portal . The Azure AD premium P2 subscription you have is not same as Azure subscription because it represents Azure AD premium licenses which enables different capabilities for your Azure Active directory. It does not create or enable any Azure subscription in this case. This license can be part of Microsoft 365 license bundles which also apply to the Azure active directory only . You can read more in the linked article how Microsoft 365 subscriptions are only applied to Azure Active directory and how licenses and subscriptions are associated because as you start your journey into azure and Azure AD, you would come across Microsoft 365 in many instances.

    On the other hand, Azure subscription is a term used to denote the subscription which will house all the resources you create on azure , either PaaS or SaaS . It is like a logical container of sorts where you can create Virtual Machines , VNET , etc. . Azure Active Directory is a resource which is always associated with the subscription . You cannot create an Azure subscription without an Azure AD instance. When you signup for Azure subscription , an azure Active directory automatically gets created in the background and the subscription is associated with the same. An Azure Active directory can be created without having any azure subscription associated with it but an azure subscription will always have a Azure Active directory associated with it . The relation between Azure AD and Azure subscription can be summarized in the following picture. You can read more here on how Azure Active Directory is associated with Azure subscription.

    trust-relationship-azure-ad.png

    Think of Azure AD as a single representation of your company users for SSO purposes and azure subscriptions to be department specific allocations for different resources you may have. Its not the best analogy but one that helps understand and visualize . Since no one like to remember multiple user accounts hence users will always be in one directory and hence a company can have one directory but will always have more than one department like HR , finance operations etc. and thus the need for different subscriptions for different departments . So one Azure Active directory instance can be associated or have a trust relationship with multiple azure subscriptions.

    Now that we have established the difference between a Azure subscription and Azure AD premium P2 subscription/ Microsoft 365 subscription , we can move ahead with how to create an azure subscription . If you would like to signup for Azure subscription in your case then you can search for subscriptions blade as shown below after login into azure and click to add a new subscription .

    201259-image.png

    201317-image.png

    For example I have two subscriptions in my tenant . You can also create a free subscription by going to this link , you can start for a $200 credit free of cost for a month and then continue to use some services for next 12 month. Please go through the step by step guide here for creating a subscription. To avoid fraud and misuse the process will require credit card verification once . Hope the information provided is useful . If you still have any doubts , please post the details with screenshots and we will help you understand this better. If the post is useful for you , please do accept the post as answer for improving the relevancy of the answer within the community forum which in turn will help other members of the community searching for similar queries.

    Thank you .

    ----------------------------------------------------------------------------------------------------------------------------------------------------------

    • Please don't forget to click on 130616-image.png whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification
    • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators
    2 people found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alan Kinane 16,786 Reputation points MVP
    2022-05-12T08:43:42.327+00:00

    Hi, Azure Active Directory is an identity management service, your Azure AD Premium 2 licenses are only for features of this particular service and cannot be used to deploy Azure resources.

    To deploy Azure resources you will need to sign up for an Azure subscription which is a consumption based billing service for what you deploy. You might want to start with a free trial to learn how it all works, see this link: https://azure.microsoft.com/en-us/free/