Creating Azure MCA Subscriptions with .NET

Roy_Jaze 20

How can I programmatically create multiple subscriptions in my Azure tenant using .NET (C#)? I have searched extensively, but haven't found a solution. Can anyone help me out?

SadiqhAhmed-MSFT 40,286 Reputation points Microsoft Employee

2024-06-26T11:43:29.94+00:00
Hello @Roy_Jaze Thank you for reaching out to us on Microsoft Q&A platform. Happy to thelp!

Creating multiple subscriptions programmatically in Azure using .NET (C#) involves interacting with the Azure Management APIs. Here’s a step-by-step outline of how you can achieve this:

Prerequisites:

Azure Service Principal: You need to have an Azure Active Directory (AAD) service principal with sufficient permissions to create subscriptions. This requires administrative privileges in your Azure AD tenant.

Azure SDK for .NET: Ensure you have the Azure SDK for .NET installed in your development environment. You can install it via NuGet Package Manager in Visual Studio or using the .NET CLI.

Steps to Programmatically Create Subscriptions:

1. Authenticate with Azure AD:

You will use the Azure Management Libraries for .NET to authenticate and interact with Azure APIs. Here’s how to authenticate using a service principal:

using Microsoft.Azure.Management.ResourceManager;

using Microsoft.Azure.Management.ResourceManager.Models;

using Microsoft.Azure.Management.ResourceManager.Fluent;

using Microsoft.Azure.Management.ResourceManager.Fluent.Authentication;

using Microsoft.Identity.Client; // For MSAL

using System;

using System.Threading.Tasks;

public async Task<string> GetAccessTokenAsync()

{

string tenantId = "<Your Tenant ID>"; // Azure AD tenant ID

string clientId = "<Your Client ID>"; // Service Principal Application (client) ID

string clientSecret = "<Your Client Secret>"; // Service Principal Secret

var authorityUri = $"https://login.microsoftonline.com/{tenantId}";

var app = ConfidentialClientApplicationBuilder.Create(clientId)

.WithClientSecret(clientSecret)

.WithAuthority(new Uri(authorityUri))

.Build();

string[] scopes = new string[] { "https://management.azure.com/.default" };

var result = await app.AcquireTokenForClient(scopes).ExecuteAsync();

return result.AccessToken;

}

2. Create Azure Subscriptions:

Once authenticated, you can use the Azure Management SDK to create subscriptions programmatically. Below is an example of how to create a subscription:

public async Task CreateSubscriptionAsync(string subscriptionName, string offerType, string tenantId, string accessToken)

{

var credentials = new TokenCredentials(accessToken);

var azureClient = new ResourceManagementClient(credentials)

{

SubscriptionId = "<Your Subscription ID>" // Optional if known

};

// Create subscription parameters

var subscriptionCreationParams = new SubscriptionCreationParameters

{

DisplayName = subscriptionName,

OfferType = offerType, // e.g., MS-AZR-0017P (Pay-As-You-Go)

Owners = new[] { tenantId } // Azure AD tenant ID

};

try

{

var subscription = await azureClient.Subscriptions.CreateOrUpdateAsync(subscriptionId, subscriptionCreationParams);

Console.WriteLine($"Subscription '{subscription.Name}' created successfully.");

}

catch (Exception ex)

{

Console.WriteLine($"Error creating subscription: {ex.Message}");

}

}

Execute the Code:

Call the GetAccessTokenAsync method to obtain the access token, then use it to call CreateSubscriptionAsync to create subscriptions as needed.

Notes:

Offer Type: Ensure you specify the correct offer type (MS-AZR-0017P for Pay-As-You-Go) based on your subscription requirements. You can find other offer types in Azure documentation depending on your subscription needs.

Error Handling: Implement proper error handling and logging in your application to capture any issues during subscription creation.

Permissions: The service principal used must have sufficient permissions (typically Owner or Contributor role at the Azure AD tenant level) to create subscriptions.

Conclusion:

By following these steps and using the Azure Management SDK for .NET, you can programmatically create multiple subscriptions in your Azure tenant. Ensure you handle authentication securely and validate permissions before executing these operations in a production environment.

Note: FYI, this is an AI generated response to your question.
Roy_Jaze 20 Reputation points

2024-06-27T03:34:44.4933333+00:00

Hi SadiqhAhmed-MSFT,

I've tested the above code that's good. However, It shows lot of conflicts and errors. Below given screenshot may help you to understand.

Please make a test and share the proper code.

Thanks in advance.
SadiqhAhmed-MSFT 40,286 Reputation points Microsoft Employee

2024-06-27T07:55:26.2533333+00:00

@Roy_Jaze I do not have multiple subscriptions to try this code and there is not readily available code that can be shared with you.

Share via

Creating Azure MCA Subscriptions with .NET