IT:AD:Azure:Subscription [Notes]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
# IT:AD:Azure:Subscription #

<callout type="Navigation" class="small">

* [[../|(UP)]]
{{indexmenu>.#2|nsort tsort}}
* See also:
  * [[IT/AD/Azure/Account/]]
  * [[IT/AD/Azure/Terms/Enrollment/]]


</callout>


<panel title="Summary">

An [[IT/AD/Azure/Subscription/]] is a Billing and Security Container (whereas [[IT/AD/Azure AD/]] is an Identity Container) ((https://blog.tatham.oddie.com.au/2016/06/09/how-aad-vsts-relate-to-azure-subscriptions/)).

An [[IT/AD/Azure/Subscription/|Azure Subscription]] is an association between an [[IT/AD/Azure/Account/|Account]] and an Service of some kind. 

In the case of [[IT/AD/Azure/]], a [[IT/AD/Azure/Subscription/|Subscription]] gives the end user access to create Azure resources, services, etc. depending on its [[IT/AD/Azure/Security/Role/|Roles]].

An [[IT/AD/Azure/Account/|Account]] can have multiple types of *Subscriptions*: 
* [[IT/AD/Azure/]] *Subscription*, 
* [[IT/AD/O365/]] *Subscription*, 
* [[IT/AD/Visual Studio Team Services/]] *Subscription*
* etc.

Here we are talking only about *Azure Subscriptions*.


</panel>


## MISC

* Typically Business Heads, IT Division Heads.
* Can view *Usage Data* for the Account.
* Under EA usage, can sign up for Preview features.
* can have *n* [[IT/AD/Azure/Subscription/|Subscription]].
  * Can update the *Service Administrator* and *Service Co-Administrator*.
  * By default, all subscriptions are created with the updateable name 'Enterprise'.
  * Recommend accounts be created on functional, business or geographic divisions.


<uml>
!includeurl http://skysigal.com/_media/resources/configuration/plantuml/minimalist.txt

User *-- Account
Account *-- Subscription
Subscription *-- Directory
Subscription *-- "Resource Group"
package "Resource Group" <<frame>> {
  class VMs
  class WebApps
}
Directory -- Domain
Domain -- User

</uml>






## Notes ##


### Subscription Management

Depending on the Subscription Type (see below), the subscription is managed from the following portals:
   
* http://ea.azure.com
* manage.windowsazure.com <- old ea portal{{ :IT:AD:Azure:subscription:azure_account_subscription_thumb.png?direct |}}


### Subscription Billing

Billing is explorer in further detail here:
* [[IT/AD/Azure/Billing/]]



### Relationship between Azure Subscription and Accounts

As stated [[IT/AD/Azure/Account/|elsewhere]], an [[IT/AD/Azure/Account/|Account]] can be related to 0-* [[IT/AD/Azure/Subscription/|Subscriptions]].

<uml>
!includeurl http://skysigal.com/_media/resources/configuration/plantuml/minimalist.txt

class Account 
class Subscriptions 

Account o-RIGHT- "0-*" Subscriptions
</uml>

But a [[IT/AD/Azure/Subscription/|Subscription]] always has at least one [[IT/AD/Azure/Account/]] associated to it as its [[IT/AD/Azure/Security/Role/BuiltIn/Owner/]] (and its [[IT/AD/Azure/Security/Role/Administration/Service Administrator/|Service Administrator (SA)]]).

<uml>
!includeurl http://skysigal.com/_media/resources/configuration/plantuml/minimalist.txt

class Account 
class Subscription {
  Account: Owner
  Account: Administrator
  Account: Co-Administrators
}

Subscription -- "1-*" Account
</uml>


<callout icon="true" type="info">
Whereas only the [[IT/AD/Azure/Security/Role/Administration/Account Administrator/|Account Administrator (AA)]] can see billing information (Credit Card info, etc.) any of the above [[IT/AD/Azure/Account/|Accounts]] can create services/resources (including [[IT/AD/Azure AD/|Azure AD instances]], which we'll get back to later).
</callout>












### Azure Subscriptions Types

{{page>IT/AD/Azure/Subscription/HowTo/Understand the different Subscription types#Notes&noheader&nofooter]]}}




### Relationship with Azure Active Directory

{{page>IT/AD/Azure/Subscription/HowTo/Understand the Relationship with Azure Active Directory#Notes&noheader&nofooter}}














### Constraints

* You can be an *Account Owner* ( in only a single Enrollment).
  * A *Department Administrator* can be for multiple [[../Department/|Department]]s.




## References

* http://www.edutech.me.uk/microsoft/identity-and-access-management/active-directory/microsoft-azure-how-subscription-administrators-directory-administrators-differ/
* https://azure.microsoft.com/en-us/documentation/articles/active-directory-how-subscriptions-associated-directory/
* http://www.mscloud.be/azure-subscriptions-best-practices/