Skip to main content

Connect Azure to Eco

You can connect your account to Eco to get estimated cost savings analysis if you have one of these account or agreement types:

  • Azure Enterprise Agreement (EA)
  • Microsoft Customer Agreement (MCA)
  • Microsoft Online Services Program (MOSP)/pay as you go (PAYG)

Cloud Solution Provider (CSP) users need to contact Support.

You can read the FAQs. The Eco Azure team can help you to set up the registered application and transfer the application credentials.

If your secret key has expired, you can add the new expiration date.

Prerequisites​

  • Review read-only permissions required for the Eco cost specialist team.
  • The Azure user must be a global administrator with elevated access and access to the management groups or subscriptions.
  • The Azure user must be an enterprise administrator (EA) or billing account owner (MCA).
  • A member account only. The account cannot be a guest user account.
  • A registered Spot account.

Connect Cloud Account​

  1. In the Spot console, click Eco > Microsoft Azure > Azure Billing Account.

  2. Select the onboarding type:

    • Automated onboarding is the quicker option. The Microsoft Application Consent process allows Eco Azure to build the app registration on your behalf and use your credentials.
    • Manual onboarding lets you use higher security requirements when needed:

      1. Register an application in Microsoft Entra ID. Select Accounts in this organizational directly only, without a redirect URI.

      2. Create a new client secret. Save the secret key and its expiration date.

        note

        Save the secret key because it won't be displayed again after you leave this page.

  3. For EA only, assign the EnrollmentReader role to the registered application using a Microsoft API.

    Sample header input and body of API call
    Header Inputs: 
    billingAccountName: <enrollment id> 
    billingRoleAssignmentName: 24f8edb6-1668-4659-b5e2-40bb5f3a7d7e 
    Example of body for API call: 
    { 
    "properties": { 
    "roleDefinitionId": "/providers/Microsoft.Billing/billingAccounts/<insert enrollment number>/billingRoleDefinitions/24f8edb6-1668-4659-b5e2-40bb5f3a7d7e", 
    "principalTenantId": "<insert Tenant ID>", 
    "principalId": "<insert Object Id of the service principle>"        
    } 
    }

  4. For MCA only, add the billing account reader role to the registered application.

  5. Assign the cost management reader role to the registered application on the management groups or subscriptions you want to manage (the management groups/subscriptions you want Eco Azure to purchase reservations).

  6. For PAYG only, assign the reservation reader role to the registered application.

    1. Go to the Reservations page > Role assignments > Add role assignment.
    2. Search for and select Reservation Reader, then click Next > Select Members.
    3. Search for and select the Eco Azure registered application, then click Review + Assign.

  7. In the Spot console, in the App Registration page, enter the Application ID, Tenant ID, Application Secret Value and Expiration date and click Connect.

Expired Client Secret​

If your client secret expires, you need to update Eco with your new expiration date.

When you get a notification in the Eco Dashboard that your secret key has expired, click:

  • Automatically to sign in to your Azure account to give Spot application permission to programmatically set up the Eco Azure dashboard. Spot will create a new secret key and update your expiration date.
  • Manually to add the new secret key and its expiration date in the Spot console.