Prevent standard users from creating subscriptions in Azure

NGloudemans 26

Hello,
Looking in our Azure portal, a few standard users have created subscriptions. I need to be able to prevent this. I have already set the AllowAdHocSubscriptions tag to false using MSOL, but users are still able to make subscriptions. Is there somewhere else I need to make a change?

Mahendar Potharaju 31 Reputation points

2023-02-25T03:56:31.15+00:00

Can we create a custom policy to prevent users from creating azure subscriptions?

1 answer

Marilee Turscak-MSFT 36,411 Reputation points Microsoft Employee

2022-01-19T23:30:52.51+00:00

[4/16/2024] Updating this post with the current process as of 4/16:

There is no control in Entra to disable subscription signups (other than license-based subscriptions). There is an internal process for blocking non EA subscriptions through a support ticket and we can only block non-EA offer sign-ups.
Please sign in to rate this answer.

5 people found this answer helpful.
Mark Gibson 25 Reputation points

2023-01-11T16:43:15.7566667+00:00

Hi, following on from this comment a year ago, has there any improvements on disabling subscription creation, or limiting this to certain admin users/groups?

Thanks :)

Matt Bennett 10 Reputation points

2023-10-11T14:39:23.28+00:00

Updating this to see there is a further update? We're still having issues with users purchasing Azure services but disabling self-service doesn't stop it.

Micah Burke 15 Reputation points

2024-01-11T22:32:23.39+00:00

We had users create Azure subscriptions without authorization. We must be able to prevent this easily without having to resort to PowerShell arcanery.

MICHAEL LEAHEY 10 Reputation points

2024-05-07T12:38:51.69+00:00

Still looking for a way to block/prevent standard users from creating Azure subscriptions in production tenants... Hello Microsoft...

DonnaSmith 131 Reputation points

2024-06-04T11:18:22.33+00:00

whats the implication of doing the following - any issue for certain services using trial products or anything else im possibly missing or does it just mean standard non admin users cant add/remove subs?
There is an internal process for blocking non EA subscriptions through a support ticket and we can only block non-EA offer sign-ups.
Sign in to comment

Share via

Prevent standard users from creating subscriptions in Azure

1 answer