question

NAVARAJANALSUBRAMANIAM-5819 avatar image
0 Votes"
NAVARAJANALSUBRAMANIAM-5819 asked AlanKinane commented

Resource subscription in azure

Hello Good day everyone. I am new to this azure cloud platform. There is one question regarding the azure active directory id. Currently, I have one organization id which ending in 'onmicrosoft.com'. This id have subscription to azure active directory premium 2.

So now, I want to create a resource in azure using the id. Unfortunately, I can't create the resource due to subscription. I'm unable to create subscription also. I saw all the documentation but I can't understand what's going on with this id. If someone know regarding this please help. Thank You.

azure-managed-identity
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

shashishailaj avatar image
2 Votes"
shashishailaj answered NAVARAJANALSUBRAMANIAM-5819 commented

@NAVARAJANALSUBRAMANIAM-5819,
Thank you for your query . Welcome to Q&A community forum . I understand that you are trying to create a resource in Azure subscription and you do not see any azure subscription . Let me provide you more clarification on this.

We have Azure VM and other IaaS service which I believe you are trying to create but it wont work unless you have an azure subscription associated with the directory . Azure Active directory acts as a Identity control plane which is user store for any organization . If you have experience with on-premise Active directory or directory service of any kind then you can consider the Azure AD as similar to the user store and authentication service in the cloud which provide authentication services and user directory services to every component in Microsoft Cloud.

Every Azure Active directory has a tenant ID and tenant name . Tenant name will always be in the format [xxxxxxxx].onmicrosoft.com and tenant Id will be in a GUID format . It is a unique ID which represents your azure active directory instance in the azure AD public cloud. The Azure Active directory has different types of licenses which can be associated with this service. The same directory instance can be access from Azure portal as well as Microsoft 365 portal . The Azure AD premium P2 subscription you have is not same as Azure subscription because it represents Azure AD premium licenses which enables different capabilities for your Azure Active directory. It does not create or enable any Azure subscription in this case. This license can be part of Microsoft 365 license bundles which also apply to the Azure active directory only . You can read more in the linked article how Microsoft 365 subscriptions are only applied to Azure Active directory and how licenses and subscriptions are associated because as you start your journey into azure and Azure AD, you would come across Microsoft 365 in many instances.

On the other hand, Azure subscription is a term used to denote the subscription which will house all the resources you create on azure , either PaaS or SaaS . It is like a logical container of sorts where you can create Virtual Machines , VNET , etc. . Azure Active Directory is a resource which is always associated with the subscription . You cannot create an Azure subscription without an Azure AD instance. When you signup for Azure subscription , an azure Active directory automatically gets created in the background and the subscription is associated with the same. An Azure Active directory can be created without having any azure subscription associated with it but an azure subscription will always have a Azure Active directory associated with it . The relation between Azure AD and Azure subscription can be summarized in the following picture. You can read more here on how Azure Active Directory is associated with Azure subscription.

trust-relationship-azure-ad.png

Think of Azure AD as a single representation of your company users for SSO purposes and azure subscriptions to be department specific allocations for different resources you may have. Its not the best analogy but one that helps understand and visualize . Since no one like to remember multiple user accounts hence users will always be in one directory and hence a company can have one directory but will always have more than one department like HR , finance operations etc. and thus the need for different subscriptions for different departments . So one Azure Active directory instance can be associated or have a trust relationship with multiple azure subscriptions.

Now that we have established the difference between a Azure subscription and Azure AD premium P2 subscription/ Microsoft 365 subscription , we can move ahead with how to create an azure subscription . If you would like to signup for Azure subscription in your case then you can search for subscriptions blade as shown below after login into azure and click to add a new subscription .


201259-image.png

201317-image.png

For example I have two subscriptions in my tenant . You can also create a free subscription by going to this link , you can start for a $200 credit free of cost for a month and then continue to use some services for next 12 month. Please go through the step by step guide here for creating a subscription. To avoid fraud and misuse the process will require credit card verification once . Hope the information provided is useful . If you still have any doubts , please post the details with screenshots and we will help you understand this better. If the post is useful for you , please do accept the post as answer for improving the relevancy of the answer within the community forum which in turn will help other members of the community searching for similar queries.

Thank you .


  • Please don't forget to click on 130616-image.png whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how

  • Want a reminder to come back and check responses? Here is how to subscribe to a notification

  • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators



image.png (22.8 KiB)
image.png (57.6 KiB)
· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank You @shashishailaj. It was clear explanation regarding the ID. Now I understand how it work based on your figures explanation.

0 Votes 0 ·

Hi @shashishailaj , I have one more question.
1. How can I sign up for Azure subscription under company account?
2. Is there any offer or plan based on my requirement?

0 Votes 0 ·
shashishailaj avatar image shashishailaj NAVARAJANALSUBRAMANIAM-5819 ·

@NAVARAJANALSUBRAMANIAM-5819 You can try creating a subscription using the same options that I provided above in the answer. You can create a free trial subscription using the free trial link. If you are using company account and if you have the right permissions as mentioned in this article, you will be able to create a subscription. This azure subscription will automatically be associated with azure AD tenant of your company if your company uses any Microsoft cloud services. If you company does not have any association with Azure/any Microsoft cloud service then in that case if you signup with user@contoso.com then a new tenant named usercontoso.onmicrosoft.com will be created automatically with the subscription that you create. There are different types of offers that are available which you can choose from Like EA subscription , Dev/test subscription , Pay As you go subscription etc. you can try to find out Enterprise Agreement admins in your company's IT team to know more about offers available to individuals within your company .

1/2

1 Vote 1 ·

Okay thank you a lot @shashishailaj. Your information really helpful to me.

0 Votes 0 ·
shashishailaj avatar image shashishailaj NAVARAJANALSUBRAMANIAM-5819 ·

If you are just testing Azure , I would suggest you to go with Free trial subscription where you get a credit of $200 for first 30 days to test everything . Going forward you can convert that into a Pay as you go subscription by adding your credit card. If this is just for testing purposes then you can check with your company representatives if they have Enterprise agreement with Microsoft and then you can ask them for a enterprise Dev/Test environment which will help in cost savings for testing purposes. For more information about all the offers available you can check this page. All offers may not apply in your case hence you may have to check it with IT team within your company.

2/2

0 Votes 0 ·
AlanKinane avatar image
0 Votes"
AlanKinane answered AlanKinane commented

Hi, Azure Active Directory is an identity management service, your Azure AD Premium 2 licenses are only for features of this particular service and cannot be used to deploy Azure resources.

To deploy Azure resources you will need to sign up for an Azure subscription which is a consumption based billing service for what you deploy. You might want to start with a free trial to learn how it all works, see this link: https://azure.microsoft.com/en-us/free/

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank You Mr @AlanKinane for your answer. It was really helpful to me.

0 Votes 0 ·

Hi Mr @AlanKinane, I have one more question.
1. How can I sign up for Azure subscription under company account?
2. Is there any offer or plan based on my requirement?

0 Votes 0 ·
AlanKinane avatar image AlanKinane NAVARAJANALSUBRAMANIAM-5819 ·

There are several ways, take a look here: https://azure.microsoft.com/en-us/pricing/purchase-options/

0 Votes 0 ·