Configuring an EA or MCA Account in CloudCheckr CMx

This credentialing option is only available within the CMx interface.
Microsoft has announced that beginning October 10, 2022 for Commercial Direct Enterprise Agreements, and February 20, 2023 for Commercial Indirect Enterprise Agreements, customers will not be able to manage their billing account in the EA Portal. Instead, Enterprise Agreement customers must use the Azure Portal to manage their Enterprise Agreements.

In parallel with this, CloudCheckr has been advised that the API Access Key generated from the EA Portal will no longer be functional, which will cause data ingestion interruption.

Enterprise Agreements

EA users will need to have the Enrollment Reader role assigned in Azure Cost Management + Billing.

Microsoft Customer Agreements

MCA users will need two different roles:

  • Azure Active Directory: Billing Administrator
  • Cost Management + Billing: Billing Account Reader
  1. Launch CloudCheckr.
  2. On the Home page, type Account Hierarchy into the Search bar at the top of the screen.
  3. On the Accounts page, click the + NEW button and select Account. The Create Account sub-drawer is displayed.
  4. Type a name for your account.
  5. Select Azure as your cloud provider.
  6. From the Location drop-down menu, select an option to put your account within an existing folder.
  7. Select an option from the Payee Organizations drop-down menu that best fits how you want to create any future Payee accounts:
    • Place new payees at hierarchy root (default): CloudCheckr automatically places auto-created Payee accounts at the root level (no parent group).
    • Place new payees in same parent group as payer: CloudCheckr automatically places any newly created Payee accounts within the same group as the Payer account.
    • Place new payees in a specific location: CloudCheckr allows you to select an account group where it places all auto-created Payee accounts.
  8. From the Attributes drop-down menu, select attributes that you want to apply to your account. Attributes are key/value pairs that help your organize and categorize your accounts in CloudCheckr CMx, similar to how account-level tags work currently in CloudCheckr.
  9. Click Save. Once saved, the Edit Account sub-drawer is displayed.
  1. In the Edit Account sub-drawer, click the Manage Credentials drop-down arrow and select MCA or Enterprise Agreement Account from the drop-down list:
    The MCA or Enterprise Agreement Account Credentials sub-drawer is displayed to the right of the Edit Account sub-drawer.
  2. From the Azure Account Type drop-down menu, select Commercial, Azure Government, or Azure Germany.
  3. Click INITIATE CONSENT. The Microsoft Sign In page opens.
  4. Enter your username and password into the Microsoft sign in form and click Accept.
    The Consent on behalf of your organization checkbox is optional. If you select this option and try to re-consent to the CPV application in the future, Microsoft will bypass the Accept screen and automatically accept the application.
  5. You will be redirected back to CloudCheckr and presented with a list of billing accounts available to the user who initiated the consent process. Select the desired billing account and click Save.
  6. CloudCheckr CMx will display a message indicating that the credentials have successfully saved.

Enterprise Agreements credentialed using an Enrollment ID and API Access Key will be able to use the new, Oauth credentialing method. Existing EA customers will want to consent to CloudCheckr's service principal to ensure that CloudCheckr continues receiving cost.

  • In CMx, navigate to your Enterprise Agreement.
  • Click Manage Credentials
  • A new drawer will open allowing you to renew consent.

The user consenting to CloudCheckr's service principal must have an Enrollment Reader role.


How did we do?