Enrollment Account Scope

Important:Microsoft is deprecating the legacy Azure Enterprise Agreement (EA) APIs on May 1, 2024. Using these APIs, the Azure EA cost and usage details are imported into Flexera One. Your account manager will work with you to migrate to the new Azure Cost Management APIs to maintain your Azure cost reporting in Flexera One and ensure a seamless transition.

Flexera One uses bill data to provide an accurate view of your costs across your Enrollment Account scope. This data is consumed by the Flexera One platform and made available for prebuilt and ad-hoc analyses. To gather the cost information, certain configuration steps must be performed with specific data and credentials being shared with Flexera One.

The following steps must be completed to connect your Azure Enterprise Agreement (Legacy) Enrollment Account scope billing data to Flexera One for cost reporting purposes:

Prerequisites

Creating Scheduled Enrollment Account Scope Exports in the Azure Portal

Creating Azure (EA) Legacy Enrollment Account Scope Bill Connect

Verifying Bill Connect

Viewing Import History to Verify Bill Status.

Important:There are some limitations from Azure for using the Enrollment Account scope. For more information about these limitations, see Limitations of Using the Enrollment Account Scope.

For more information about Azure Enterprise Agreement (Modern Commerce) billing data, see Microsoft Azure Modern Commerce Agreement (MCA).

If you are part of the Azure Cloud Solution Provider program and wish to connect your partner data to Flexera One for cost reporting purposes, see Microsoft Cloud Solution Provider (CSP) Partner.

Prerequisites

The following prerequisites are required to migrate to the new Flexera One Azure EA (Legacy) Bill Connect:

•

Creating Service Principal

•

Assigning Permission to Azure Storage Account

•

Seeding Old Data.

Creating Service Principal

The Azure Cost Management APIs use Azure Active Directory (Azure AD) Authentication using service principals (SPNs). For more information on creating a service principal, see Microsoft’s documentation on Create and authenticate your service principal.

The service principal requires the following details to connect to the Azure Blob Storage APIs and then to Flexera One:

•

Client ID

•

Tenant ID

•

Client Secret

•

Billing Account ID.

Assigning Permission to Azure Storage Account

If you are setting up a new storage account in the Azure portal, you must assign the Storage Blob Data Reader role to the storage account to access the blob data.

To assign permission to the storage account:

Navigate to your newly created storage account. For more information, see Creating Scheduled Enrollment Account Scope Exports in the Azure Portal.

Click Access Control (IAM). The Access Control (IAM) page appears.

Click Add to add the permission to the storage account. The Add role assignment page appears.

Search for the Storage Blob Data Reader role and assign it to the storage account.

Seeding Old Data

Before you configure recurring exports in the Azure portal, if you have any old data, you must seed it in the relevant folders—Actual cost and Amortized cost.

Creating Scheduled Enrollment Account Scope Exports in the Azure Portal

Exports enable you to create a recurring task that automatically exports your Enrollment Account scope billing data to an Azure Blob Storage on a daily, weekly, or monthly basis. The exported data is in CSV format and contains all the cost and usage data of your Enrollment Account scope.

You can export large amounts of Enrollment Account scope data with exports from Cost Management and import it into Flexera One.

To export Enrollment Account scope data in the Azure storage account for importing it into Flexera One for cost reporting purposes:

In the upper-left corner of the Web page, click the Show portal menu icon, and then click Cost Management + Billing.

In the left pane, click Cost Management, and under the Settings section in the left pane, click Exports.

From the Scope dropdown list, select Enrollment Scope.

Click Add to create a new billing export. The New export page opens.

In the Export details section:

In the Name field, enter the name for your export.

From the Metric dropdown list, select one of the following options:

•

Actual cost (Usage and Purchases)—To export standard usage and purchase costs.

•

Amortized cost (Usage and Purchases)—To export amortized costs for purchases such as Azure reservations and Azure savings plan.

Important: You must create two exports—one for actual cost and the other for amortized cost.

From the Export type dropdown list, select Daily export of month-to-date costs. The latest data is aggregated from the previous daily exports.

Note:It is recommended to use the Daily export of month-to-date costs option as the Export type.

To split your exports into multiple files, turn on the File Partitioning toggle.

In the Storage section, select the Use existing or Create new option, and enter the storage account details to save your exported Enrollment Account scope billing data.

Click Create. Your new export appears in the list of exports.

Tip:For information on creating and managing exported data, see Microsoft’s documentation on Create and manage exported data.

Creating Azure (EA) Legacy Enrollment Account Scope Bill Connect

You must create an Azure EA (Legacy) bill connect for your Enrollment Account scope. A bill connect creates an entry point in Flexera One, through which you will then be able to upload bills. For instructions on how to add or update billing information, see Adding Billing Data or Updating Billing Data Configurations. For instructions on connecting your cloud accounts to Automation, see Managing Credentials for Policy Access to External Systems.

API Request Body Example

POST /finops-onboarding/v1/orgs/{orgId}/bill-connects/aws/iam-user

{
    "billingAccountId": "12345679",
    "clientId": "56fff7875-b6d7-7f5j-zx77-977df67fdfc7",
    "clientSecret": "MHfd8t~acbdefghijklmnnopfjyebfdhtdtdfx",
    "exportDetails": {
      "actualCostExportURL": "https://exportname.blob.core.windows.net/export-container/test/test-export-billingMonthToDate-actual-partitioned",
      "amortizedCostExportURL": "https://exportname.blob.core.windows.net/export-container/test/test-export-billingMonthToDate-amortized-partitioned",
      "enableOOBExports": false
    },
    "scopeDetails": {
      "enrollmentAccountDetails": {
         "enrollmentAccountId": "123456"
      }
    },
    "startBillingPeriod": "202308",
    "tenantId": "5837ffw33fg7-3g6t-52mt-4fht-5fd71ejf43fi" 7
}

Consider the following:

•

You can use the Enrollment Account scope only with exports.

•

When creating an Enrollment Account scope bill connect, you must:

•

Set enableOOBExports to false.

•

Enter the location URL in the following format:

https://<Storageaccountname>.blob.core.windows.net/<Containername>/<Directorypath>/<Exportname>

Example:

https://xyzexports.blob.core.windows.net/323266/sales-buyer/actual-cost-sales-buyer

Where:

xyzexports is the storage account name.

323266 is the container name.

sales-buyer is the directory path.

actual-cost-sales-buyer is the folder name (export name) to store the actual cost.

Note:You must enter the actualCostExportURL and the amortizedCostExportURL.

•

You cannot update the enrollmentAccountId after you create a bill connect.

•

By default, the start billing period is set to the current month. To include historical data, you must specify the startBillingPeriod.

Verifying Bill Connect

After you create a bill connect, you must verify the connection.

To verify bill connect in Flexera One:

Go to the Billing Processing Status page (Administration > Cloud Settings > Billing Processing Status).

In the Bill Account column, locate your bill account and verify the connection.

Viewing Import History to Verify Bill Status

Important:The Manage organization role is required to view the import history to verify the bill status. For complete descriptions of each role available in Flexera One, see Flexera One Roles.

After you verify the bill connect, you must verify the status of the bill.

To view import history in Flexera One:

Go to the Billing Processing Status page (Administration > Cloud Settings > Billing Processing Status).

In the Bill Account column, locate your bill account and click the View link. The Import History page appears.

In the Status column, ensure that the status of the bill is either Processing or Complete.

Limitations of Using the Enrollment Account Scope

For the Enrollment Account scope, you can only see the cost management details but not the balance summary data. You must have the full Enterprise Agreement scope to access the following features:

•

Savings plan list, utilization, and expiration

•

Reservation list, utilization, and expiration

•

Adjustment credits.

Note:The API call to fetch this data is not supported by Microsoft.