Skip to content

Commit 8374195

Browse files
committed
Address PR review comments
- Fix filename and update TOC link to manage-reservations-rbac-powershell.md - Apply sentence-style capitalization to headings while preserving technical role names - Fix tip formatting to use proper Azure docs [!TIP] extension - Correct User Access Administrator link anchor from #general to #user-access-administrator - Add missing punctuation and improve link consistency
1 parent 0ab0285 commit 8374195

3 files changed

Lines changed: 24 additions & 23 deletions

File tree

articles/cost-management-billing/reservations/manage-reservation-rbac-powershell.md renamed to articles/cost-management-billing/reservations/manage-reservations-rbac-powershell.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ ms.author: liuyizhu
1616

1717
# Grant RBAC access to Azure reservations using PowerShell
1818

19-
This article shows you how to grant Role-Based Access Control (RBAC) access to Azure reservations using PowerShell. To view and manage RBAC access in Azure Portal, see [Permissions to view and manage Azure reservations](view-reservations.md).
19+
This article shows you how to grant Role-Based Access Control (RBAC) access to Azure reservations using PowerShell. To view and manage RBAC access in Azure portal, see [Permissions to view and manage Azure reservations](view-reservations.md).
2020

2121
[!INCLUDE [updated-for-az](~/reusable-content/ce-skilling/azure/includes/updated-for-az.md)]
2222

articles/cost-management-billing/reservations/toc.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -157,7 +157,7 @@
157157
- name: Permissions to view and manage
158158
href: view-reservations.md
159159
- name: Grant RBAC access to Azure Reservations using PowerShell
160-
href: manage-reservation-rbac-powershell.md
160+
href: manage-reservations-rbac-powershell.md
161161
- name: View reservations as a CSP
162162
href: how-to-view-csp-reservations.md
163163
- name: Manage reservations

articles/cost-management-billing/reservations/view-reservations.md

Lines changed: 22 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -35,10 +35,10 @@ Two different authorization methods control a user's ability to view, manage, an
3535
- Billing admin roles
3636
- Reservation role-based access control (RBAC) roles
3737

38-
## Billing Admin Roles
38+
## Billing Admin roles
3939
You can view, manage, and delegate permissions to reservations by using built-in billing admin roles. To learn more about Microsoft Customer Agreement and Enterprise Agreement billing roles, see [Understand Microsoft Customer Agreement administrative roles in Azure](../manage/understand-mca-roles.md) and [Managing Azure Enterprise Agreement roles](../manage/understand-ea-roles.md), respectively.
4040

41-
### Billing Admin Roles Required for Reservation Actions
41+
### Billing Admin roles required for reservation actions
4242

4343
**View reservations:**
4444
- Microsoft Customer Agreement: Users with billing profile reader or above
@@ -57,7 +57,7 @@ You can view, manage, and delegate permissions to reservations by using built-in
5757

5858
EA admins or Billing Profile Owners must have owner or reservation purchaser access on at least one EA or MCA subscription to purchase a reservation. This option is useful for enterprises that want a centralized team to purchase reservations. For more information, see [Buy an Azure reservation](prepare-buy-reservation.md).
5959

60-
### View and Manage Reservations as a Billing Admin
60+
### View and manage reservations as a Billing Admin
6161

6262
If you're a billing role user, follow these steps to view and manage all reservations and reservation transactions in the Azure portal.
6363

@@ -68,18 +68,18 @@ If you're a billing role user, follow these steps to view and manage all reserva
6868

6969
Billing role users can take ownership of a reservation by selecting one or multiple reservations, selecting **Grant access** in the window that appears. For a Microsoft Customer Agreement, the user should be in the same Microsoft Entra tenant (directory) as the reservation.
7070

71-
### Add billing administrators
71+
### Add Billing Admins
7272

7373
Add a user as billing administrator to an Enterprise Agreement or a Microsoft Customer Agreement in the Azure portal.
7474

7575
- **Enterprise Agreement**: Add users with the _Enterprise administrator_ role to view and manage all reservation orders that apply to the Enterprise Agreement. Enterprise administrators can view and manage reservations in **Cost Management + Billing**.
7676
- Users with the _Enterprise administrator (read-only)_ role can only view the reservation from **Cost Management + Billing**.
77-
- Department admins and account owners can't view reservations _unless_ they're explicitly added to them by using Access control (IAM). For more information, see [Manage Azure Enterprise roles](../manage/understand-ea-roles.md)
77+
- Department admins and account owners can't view reservations _unless_ they're explicitly added to them by using Access control (IAM). For more information, see [Manage Azure Enterprise roles](../manage/understand-ea-roles.md).
7878

79-
- **Microsoft Customer Agreement**: Users with the billing profile owner role or the billing profile contributor role can manage all reservation purchases made using the billing profile
80-
- Billing profile readers and invoice managers can view all reservations that are paid for with the billing profile. However, they can't make changes to reservations. For more information, see [Billing profile roles and tasks](../manage/understand-mca-roles.md#billing-profile-roles-and-tasks)
79+
- **Microsoft Customer Agreement**: Users with the billing profile owner role or the billing profile contributor role can manage all reservation purchases made using the billing profile.
80+
- Billing profile readers and invoice managers can view all reservations that are paid for with the billing profile. However, they can't make changes to reservations. For more information, see [Billing profile roles and tasks](../manage/understand-mca-roles.md#billing-profile-roles-and-tasks).
8181

82-
## Reservation RBAC Roles
82+
## Reservation RBAC roles
8383

8484
### Overview
8585

@@ -93,7 +93,7 @@ Azure provides four reservation-specific RBAC roles with different permission le
9393
These roles can be scoped to either a specific resource entity (for example, subscription or reservation) or the Microsoft Entra tenant. To learn more about Azure RBAC, see [What is Azure role-based access control (Azure RBAC)?](../../role-based-access-control/overview.md).
9494

9595

96-
### Reservation RBAC Roles Required for Reservation Actions
96+
### Reservation RBAC roles required for reservation actions
9797

9898
**View reservations:**
9999
- Tenant scope: Users with reservation reader or above
@@ -104,21 +104,22 @@ These roles can be scoped to either a specific resource entity (for example, sub
104104
- Reservation scope: Built-in contributor or owner roles, or reservation contributor or above
105105

106106
**Delegate reservation permissions:**
107-
- Tenant scope: [User Access administrator](../../role-based-access-control/built-in-roles.md#general) rights are required to grant RBAC roles to all reservations in the tenant. To gain these rights, follow [Elevate access steps](../../role-based-access-control/elevate-access-global-admin.md)
107+
- Tenant scope: [User Access administrator](../../role-based-access-control/built-in-roles.md#user-access-administrator) rights are required to grant RBAC roles to all reservations in the tenant. To gain these rights, follow [Elevate access steps](../../role-based-access-control/elevate-access-global-admin.md)
108108
- Reservation scope: Reservation administrator or user access administrator
109109

110110
In addition, users who held the subscription owner role when the subscription was used to purchase a reservation can also view, manage, and delegate permissions for the purchased reservation.
111111

112-
### View and Manage Reservations with RBAC Access
112+
### View and manage reservations with RBAC access
113113

114114
If you have reservation-specific RBAC roles (reservation administrator, purchaser, contributor, or reader), purchased reservations, or were added as an owner to reservations, follow these steps to view and manage reservations in the Azure portal:
115115

116116
1. Sign in to the Azure portal
117117
2. Select **Home** > **Reservations** to list reservations to which you have access
118118

119-
> **Tip**: If you can't see your reservations, ensure you're signed in with the account that has the appropriate permissions. For cross-tenant scenarios, make sure you're in the correct tenant context.
119+
> [!TIP]
120+
> If you can't see your reservations, ensure you're signed in with the account that has the appropriate permissions. For cross-tenant scenarios, make sure you're in the correct tenant context.
120121
121-
### Delegate Reservation RBAC Roles
122+
### Delegate reservation RBAC roles
122123

123124
Under this section, you will find how to:
124125
- Delegate the Reservation Purchaser Role to a Specific Subscription
@@ -129,14 +130,14 @@ Users and groups who gain the ability to purchase, manage, or view reservations
129130

130131
_Enterprise administrators can take ownership of a reservation order. They can add other users to a reservation by using **Access control (IAM)**._
131132

132-
#### Delegate the Reservation Purchaser Role to a Specific Subscription
133+
#### Delegate the Reservation Purchaser role to a specific subscription
133134

134135
To delegate the purchaser role to a specific subscription, and after you have elevated access:
135136

136137
1. Go to **Home** > **Reservations** to see all reservations that are in the tenant.
137138
2. To make modifications to the reservation, add yourself as an owner of the reservation order by using **Access control (IAM)**.
138139

139-
#### Delegate Reservation Administrator, Contributor, or Reader Roles to a Specific Reservation
140+
#### Delegate Reservation Administrator, Contributor, or Reader roles to a specific reservation
140141

141142
To delegate the administrator, contributor, or reader roles to a specific reservation:
142143

@@ -145,15 +146,15 @@ To delegate the administrator, contributor, or reader roles to a specific reserv
145146
3. Select **Access control (IAM)** on the leftmost pane.
146147
4. Select **Add**, and then select **Add role assignment** from the top navigation bar.
147148

148-
#### Delegate Reservation Administrator, Contributor, or Reader Roles to All Reservations
149+
#### Delegate Reservation Administrator, Contributor, or Reader roles to all reservations
149150

150151
[User Access administrator rights](../../role-based-access-control/built-in-roles.md#user-access-administrator) are required to grant RBAC roles at the tenant level. To get User Access administrator rights, follow the steps for elevated access: [Elevate access steps](../../role-based-access-control/elevate-access-global-admin.md?toc=/azure/cost-management-billing/reservations/toc.json).
151152

152153
Then, to delegate the administrator, contributor, or reader role to all reservations in a tenant:
153154
1. Go to **Home** > **Reservations**
154155
2. Select **Role assignment** from the top navigation bar
155156

156-
## Grant Access to Individual Reservations
157+
## Grant access to individual reservations
157158

158159
Users who have owner access on the reservations and billing administrators can delegate access management for an individual reservation order in the Azure portal.
159160

@@ -167,20 +168,20 @@ To allow other people to manage reservations, you have two options:
167168

168169
_Enterprise Administrators can take ownership of a reservation order and they can add other users to a reservation using Access control (IAM)._
169170

170-
- For a Microsoft Customer Agreement, users with the billing profile owner role or the billing profile contributor role can manage all reservation purchases made using the billing profile. Billing profile readers and invoice managers can view all reservations that are paid for with the billing profile. However, they can't make changes to reservations. For more information, see [Billing profile roles and tasks](../manage/understand-mca-roles.md).
171+
- For a Microsoft Customer Agreement, users with the billing profile owner role or the billing profile contributor role can manage all reservation purchases made using the billing profile. Billing profile readers and invoice managers can view all reservations that are paid for with the billing profile. However, they can't make changes to reservations. For more information, see [Billing profile roles and tasks](../manage/understand-mca-roles.md#billing-profile-roles-and-tasks).
171172

172173

173-
## Grant Access with PowerShell
174+
## Grant access with PowerShell
174175
Users that have owner access for reservations orders, users with elevated access, and User Access Administrators can delegate access management for all reservation orders they have access to.
175176

176177
Access granted using PowerShell isn't shown in the Azure portal. Instead, you use the `get-AzRoleAssignment` command in the following section to view assigned roles.
177178

178-
For details on granting access with PowerShell, see [Grant RBAC access to Azure Reservations using PowerShell](manage-reservation-rbac-powershell.md).
179+
For details on granting access with PowerShell, see [Grant RBAC access to Azure Reservations using PowerShell](manage-reservations-rbac-powershell.md).
179180

180181

181182
## Next steps
182183

183184
- [Manage Azure Reservations](manage-reserved-vm-instance.md).
184-
- [Grant RBAC access to Azure Reservations using PowerShell](manage-reservation-rbac-powershell.md).
185+
- [Grant RBAC access to Azure Reservations using PowerShell](manage-reservations-rbac-powershell.md).
185186
- [Understand how reservation discounts are applied](reservation-discount-application.md).
186187

0 commit comments

Comments
 (0)