Merge pull request #304824 from hinallur/guestUserExp

Adding Guest User Experience Guidance

Author: prmerger-automator[bot]

articles/cost-management-billing/manage/manage-billing-across-tenants.md

@@ -7,7 +7,7 @@ ms.reviewer: jkinma
 ms.service: cost-management-billing
 ms.subservice: billing
 ms.topic: how-to
-ms.date: 07/29/2025
+ms.date: 08/28/2025
 ms.author: jkinma
 ---
 
@@ -107,6 +107,27 @@ Choosing to assign roles to users from associated billing tenants might be the r
 |Security     |  The users that you invite to share your billing account follow their tenant's security policies.      |  The users that you invite to share your billing account follow your tenant's security policies.       |
 |Access    | The users get access to your billing account in their own tenant and can manage billing and make purchases without switching tenants.        |  External guest identities are created for users in your tenant and these identities get access to your billing account. Users would have to switch tenant to manage billing and make purchases.     |
 
+## Understanding Guest Users in Azure Portal
+
+A guest user (also known as guested user or B2B user) is an external user who has been invited to access resources within an Azure Active Directory (Azure AD) tenant. Typically, this user has a primary identity in another Azure AD tenant or identity provider and receives access via Azure AD B2B (business-to-business) collaboration features. Once invited, the guest user appears in the inviting organization’s directory and can be assigned roles and permissions just like any other user.
+
+### Accessing the Azure Portal
+
+The guest user must sign in to the [Azure Portal](https://portal.azure.com/) using their own organization’s credentials. Upon successful authentication, they should select the host directory (the client organization) from the top-right user menu in the Azure Portal if they are members of multiple tenants.
+
+### Navigation and User Interface
+
+Once inside the client’s directory, the guest user will see the resources and features available based on their role assignments. They can navigate to: 
+
+- Cost Management + Billing: The main blade for all billing-related tasks. 
+- Billing accounts, profiles, and invoice sections: Visible as per access rights. 
+
+## Troubleshooting Common Issues for Guest Users
+
+- Access Denied Errors: Ensure correct roles are assigned and the guest has accepted the invitation. 
+- Directory Not Found: Instruct the user to switch directories in the Azure Portal. 
+- Resource Visibility: Confirm that the user’s roles map to the correct billing profiles or invoice sections. 
+
 ## Move Microsoft 365 subscriptions to a billing tenant
 
 Before moving subscriptions, make sure you [add a tenant as an associated billing tenant and enable provisioning access setting](#add-an-associated-billing-tenant). Also the global administrator of the associated billing tenant must accept the provisioning request from your billing account.

articles/cost-management-billing/microsoft-customer-agreement/manage-tenants.md

@@ -5,7 +5,7 @@ author: baolcsva
 ms.service: cost-management-billing
 ms.subservice: microsoft-customer-agreement
 ms.topic: conceptual
-ms.date: 01/07/2025
+ms.date: 08/28/2025
 ms.author: baolcsva
 ms.reviewer: baolcsva
 ---
@@ -66,6 +66,22 @@ There are three ways users with billing owner access can assign roles to users t
 - Assign billing roles to external users (outside of your primary tenant) if they are part of an associated tenant 
 - If tenants are not associated, [create guest users in primary tenant and assign roles](#add-guest-users-to-your-microsoft-customer-agreement-tenant). 
 
+## Understanding Guest Users in Azure Portal
+
+A guest user (also known as guested user or B2B user) is an external user who has been invited to access resources within an Azure Active Directory (Azure AD) tenant. Typically, this user has a primary identity in another Azure AD tenant or identity provider and receives access via Azure AD B2B (business-to-business) collaboration features. Once invited, the guest user appears in the inviting organization’s directory and can be assigned roles and permissions just like any other user.
+
+### Accessing the Azure Portal
+
+The guest user must sign in to the [Azure portal](https://portal.azure.com/) using their own organization’s credentials. Upon successful authentication, they should select the host directory (the client organization) from the top-right user menu in the Azure portal if they are members of multiple tenants.
+
+### Navigation and User Interface
+
+Once inside the client’s directory, the guest user will see the resources and features available based on their role assignments. They can navigate to: 
+
+- Cost Management + Billing: The main blade for all billing-related tasks. 
+- Billing accounts, profiles, and invoice sections: Visible as per access rights. 
+
+
 ## Add guest users to your Microsoft Customer Agreement tenant
 
 Users that are added to your Microsoft Customer Agreement billing tenant, to manage billing responsibilities from a different tenant, must be invited as a guest.
@@ -97,6 +113,12 @@ Authorization to invite guest users is controlled by your Microsoft Entra settin
 
 <a name='manage-multiple-microsoft-cloud-services-under-an-azure-ad-tenant'></a>
 
+## Troubleshooting Common Issues for Guest Users
+
+- Access Denied Errors: Ensure correct roles are assigned and the guest has accepted the invitation. 
+- Directory Not Found: Instruct the user to switch directories in the Azure Portal. 
+- Resource Visibility: Confirm that the user’s roles map to the correct billing profiles or invoice sections. 
+
 ## Manage multiple Microsoft cloud services under a Microsoft Entra tenant
 
 You can manage multiple cloud services for your organization under a single Microsoft Entra tenant. User accounts for all of Microsoft's cloud offerings are stored in the Microsoft Entra tenant, which contains user accounts and groups. The following diagram shows an example of an organization with multiple services using a common Microsoft Entra tenant containing accounts. Each service has its own portal, in blue text, where users manage their services.