A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
Hello Graeham,
Kindly check our below investigation.
Possible Causes:
- Role Hierarchy Conflicts: Sometimes roles like "Owner" may not automatically grant billing-related access, especially if they are being overridden or influenced by more specific billing roles. It's good that you've added Billing Reader and Usage Billing Contributor, but they may need to be paired with a Billing Admin or specific permissions within the Microsoft Billing scope.
Account and Subscription Type Mismatch: Since your account was created 10 years ago, it's possible there are legacy configurations or restrictions in place for older accounts. Microsoft may have different access policies or configurations for accounts that were created during early periods of Azure's billing system.
Billing Account Association: It’s also possible that your Azure subscription is not properly linked to the correct billing account, especially if you're seeing that another owner has full access. If there's a separation between the Azure account and the billing account, that could cause discrepancies.
Recommended Actions:
Verify Billing Permissions: Ensure you have the Billing Admin role on the billing account in addition to the Billing Reader. The Billing Admin role should allow you to view invoices and manage payment methods.
You can also verify this by going to:
- Subscriptions > Access Control (IAM) > Check if you're granted Billing Admin in the Billing Account.
Check Subscription Link to Billing Profile: Confirm that your subscription is associated with the right billing profile and billing account. This is important as the Azure subscription can have different billing configurations depending on the account type. You may need to work with the other subscription owner to confirm this.
Check Billing Account Configuration: If your account has been migrated or transitioned over the years, there may be old configurations that impact access. If possible, compare the Azure AD Tenant and Billing Account between your account and the other subscription owner’s account. This might shed light on any discrepancies in your access setup.
- Review Azure AD Roles: Sometimes, roles assigned via Azure AD (Directory roles) can also influence what you can see, especially in older accounts. You might have to check if your account needs a higher level of access like Global Administrator or Billing Administrator at the directory level.
Let me know if you'd like to dive deeper into any of these steps!