Limited IAM Permissions for Azure Active Discount Management

To actively manage your portfolio of Reservations and Savings Plans for Compute, roles must be added to the App Registration deployed in your billing scope before a Savings Analysis was conducted. These new roles will allow ProsperOps to purchase and modify Azure discount instruments, and update quotas. All roles added to the App Registration when it was originally created should stay in place.


Enterprise Agreements

  • EA Purchaser on the billing account 
  • Reservations Purchaser on the root management group
  • Savings Plan Purchaser on the root management group
  • Quota Request Operator on the root management group

Microsoft Customer Agreements

  • Billing Profile Contributor on the billing profile
  • Reservations Purchaser on the root management group
  • Savings Plan Purchaser on the root management group
  • Quota Request Operator on the root management group