Cannot programatically create subscription

Question

Cannot programatically create subscription

Anonymous

![Error-image] (/api/attachments/e4531a14-2bbe-4145-bb35-ef665d46065c?platform=QnA)Hi,

I am having issues programatically creating MCA subscriptions.

we want to use terraform to create the subscription but keep getting the following error. (See image)

I have tried using az cli - I get the same issue. When going through portal as myself it works fine.

Even using AZ Cli with my own credentials does not work.

I have given spn Owner at the scope"/".

I have also given it billing owner on the billing account/profile/invoice section and also azure subscription creator on billing invoice section.

Still no luck.

What am I missing?

Pranay Reddy Madireddy 6,340 Reputation points Moderator

2024-10-15T08:10:27.2733333+00:00

Hii Whitmore, Rachel

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

make sure your Service Principal Name (SPN) has the "Billing Reader" and "Billing Owner" roles on the billing account and subscription. This will allow it to create subscriptions without issues.

Make sure your Service Principal (SPN) has permission to create subscriptions by assigning it the "Subscription Creator" role on the relevant billing scope.

Verify that your SPN is assigned the "Contributor" role on the resource group where the subscription will be created.

Make sure your Terraform provider and Azure CLI commands are using the right API version that allows the features you want to use.

If you’re running your Terraform code again, check that your Terraform state is clean and doesn’t have any old or failed resources. Check the activity logs in Azure for detailed error messages that explain why the subscription creation is failing.

For reference, please review this documentation: - https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/assign-roles-azure-service-principals
https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/programmatically-create-subscription-microsoft-customer-agreement?tabs=azure-cli

https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-steps

https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/guides/azure_cli

If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it".
Pranay Reddy Madireddy 6,340 Reputation points Moderator

2024-10-16T08:42:26.35+00:00

Hii Whitmore, Rachel
If you had a chance to see my comment to your question. If it was helpful, please click "Upvote" on my post let us know Thank you...!
Pranay Reddy Madireddy 6,340 Reputation points Moderator

2024-10-17T14:07:59.4+00:00

Hii Whitmore, Rachel
If you had a chance to see my comment to your question. If it was helpful, please click "Upvote" on my post let us know Thank you...!