Create a Microsoft Customer Agreement subscription

Članak
04/05/2023

This article helps you create a Microsoft Customer Agreement subscription for yourself or for someone else in your current Azure Active Directory (Azure AD) directory/tenant. You may want another subscription to avoid hitting subscription quota limits, to create separate environments for security, or to isolate data for compliance reasons.

If you want to create a Microsoft Customer Agreement subscription in a different Azure AD tenant, see Create an MCA subscription request.

If you want to create subscriptions for Enterprise Agreements, see Create an EA subscription. If you're a Microsoft Partner and you want to create a subscription for a customer, see Create a subscription for a partner's customer. Or, if you have a Microsoft Online Service Program (MOSP) billing account, also called pay-as-you-go, you can create subscriptions starting in the Azure portal and then you complete the process at https://signup.azure.com/.

Note

You can't provision Azure resources such as subscriptions, virtual machines, Azure web apps, or Azure functions in an Azure AD B2B or Azure AD B2C tenant. You must create those resources in your Azure AD tenant.

To learn more about billing accounts and identify your billing account type, see View billing accounts in Azure portal.

Permission required to create Azure subscriptions

You need the following permissions to create subscriptions for a Microsoft Customer Agreement (MCA):

Owner or contributor role on the invoice section, billing profile or billing account. Or Azure subscription creator role on the invoice section.

For more information, see Subscription billing roles and task.

Create a subscription

Use the following procedure to create a subscription for yourself or for someone in the current Azure Active Directory. When you're done, the new subscription is created immediately.

Sign in to the Azure portal.
Navigate to Subscriptions and then select Add.
On the Create a subscription page, on the Basics tab, type a Subscription name.
Select the Billing account where the new subscription gets created.
Select the Billing profile where the subscription gets created.
Select the Invoice section where the subscription gets created.
Next to Plan, select Microsoft Azure Plan for DevTest if the subscription is used for development or testing workloads. Otherwise, select Microsoft Azure Plan.
Select the Advanced tab.
Select your Subscription directory. It's the Azure Active Directory (Azure AD) where the new subscription gets created.
Select a Management group. It's the Azure AD management group that the new subscription is associated with. You can only select management groups in the current directory.
Select one or more Subscription owners. You can select only users or service principals in the selected subscription directory. You can't select guest directory users. If you select a service principal, enter its App ID.
Select the Tags tab.
Enter tag pairs for Name and Value.
Select Review + create. You should see a message stating Validation passed.
Verify that the subscription information is correct, then select Create. A notification that the subscription is getting created is shown.

After the new subscription is created, the owner of the subscription can see it in on the Subscriptions page.

View all subscriptions

If you created a subscription but can't find it in the Subscriptions list view, a view filter might be applied.

To clear the filter and view all subscriptions:

In the Azure portal, navigate to Subscriptions.
At the top of the list, select the Subscriptions filter item.
At the top of the subscriptions filter box, select All. At the bottom of the subscriptions filter box, clear Show only subscriptions selected in the global subscriptions filter.
Select Apply to close the box and refresh the list of subscriptions.

Create subscription in other tenant and view transfer requests

A user with the following permission can create subscriptions in their customer's directory if they're allowed or exempted with subscription policy. For more information, see Setting subscription policy.

Billing account owner or contributor
Billing profile owner or contributor
Invoice section owner

When you try to create a subscription for someone in a directory outside of the current directory (such as a customer's tenant), a subscription creation request is created.

When the request is created, the subscription owner (the customer) is sent an email letting them know that they need to accept subscription ownership. The email contains a link used to accept ownership in the Azure portal. The customer must accept the request within seven days. If not accepted within seven days, the request expires. The person that created the request can also manually send their customer the ownership URL to accept the subscription.

After the request is created, it's visible in the Azure portal at Subscriptions > View Requests by the following people:

The tenant global administrator of the source tenant where the subscription provisioning request is made.
The user who made the subscription creation request for the subscription being provisioned in the other tenant.
The user who made the request to provision the subscription in a different tenant than where they make the Subscription – Alias REST API call instead of the Azure portal.

The subscription owner in the request who resides in the target tenant doesn't see this subscription creation request on the View requests page. Instead, they receive an email with the link to accept ownership of the subscription in the target tenant.

Anyone with access to view the request can view its details. In the request details, the Accept ownership URL is visible. You can copy it to manually share it with the subscription owner in the target tenant for subscription ownership acceptance.

Create an Azure subscription programmatically

You can also create subscriptions programmatically. For more information, see Create Azure subscriptions programmatically.

Need help? Contact us.

If you have questions or need help, create a support request.