Prevent standard users from creating subscriptions in Azure

Question

Prevent standard users from creating subscriptions in Azure

NGloudemans 41

Hello,
Looking in our Azure portal, a few standard users have created subscriptions. I need to be able to prevent this. I have already set the AllowAdHocSubscriptions tag to false using MSOL, but users are still able to make subscriptions. Is there somewhere else I need to make a change?

Mahendar Potharaju 46 Reputation points

2023-02-25T03:56:31.15+00:00

Can we create a custom policy to prevent users from creating azure subscriptions?

1 answer

Your answer

Mahendar Potharaju 46 Reputation points

2023-02-25T03:56:31.15+00:00

Can we create a custom policy to prevent users from creating azure subscriptions?

Answer 1

Marilee Turscak-MSFT 37,151 Microsoft Employee

[4/16/2024] Updating this post with the current process as of 4/16:

There is no control in Entra to disable subscription signups (other than license-based subscriptions). There is an internal process for blocking non EA subscriptions through a support ticket and we can only block non-EA offer sign-ups.

Mark Gibson 30 Reputation points

2023-01-11T16:43:15.7566667+00:00

Hi, following on from this comment a year ago, has there any improvements on disabling subscription creation, or limiting this to certain admin users/groups?

Thanks :)
Matt Bennett 15 Reputation points

2023-10-11T14:39:23.28+00:00

Updating this to see there is a further update? We're still having issues with users purchasing Azure services but disabling self-service doesn't stop it.
Micah Burke 25 Reputation points

2024-01-11T22:32:23.39+00:00

We had users create Azure subscriptions without authorization. We must be able to prevent this easily without having to resort to PowerShell arcanery.
MICHAEL LEAHEY 25 Reputation points

2024-05-07T12:38:51.69+00:00

Still looking for a way to block/prevent standard users from creating Azure subscriptions in production tenants... Hello Microsoft...
DonnaSmith 141 Reputation points

2024-06-04T11:18:22.33+00:00

whats the implication of doing the following - any issue for certain services using trial products or anything else im possibly missing or does it just mean standard non admin users cant add/remove subs?
There is an internal process for blocking non EA subscriptions through a support ticket and we can only block non-EA offer sign-ups.
Jim Onur 10 Reputation points

2024-10-02T16:31:22.3966667+00:00

I don't understand why this cannot be blocked for regular users. The ability to create subscriptions MUST be an elevated privilege!
Admin Eric Redegeld 5 Reputation points

2024-12-13T08:06:54.0166667+00:00

yess, this realy an big fail. okay we are an school and students must learn. But then please in an other environment and not in the active tenant!!!!!

Share via

Prevent standard users from creating subscriptions in Azure

1 answer

Your answer