Skip to content
ProsperOps Console
  • There are no suggestions because the search field is empty.

Limited IAM Permissions for Azure Active Discount Management

To actively manage your portfolio of Reservations and Savings Plans for Compute, we require additional IAM permissions. These new roles will allow ProsperOps to purchase and modify Azure discount instruments, and update quotas. All roles added to the App Registration when it was originally created for the Savings Analysis should stay in place.

Enterprise Agreements

  • EA Purchaser on the billing account 
  • Reservations Purchaser on the root management group
  • Savings Plan Purchaser on the root management group
  • Quota Request Operator on the root management group
  • ProsperOps Custom Role* on the root management group
  • Reservation Administrator on the tenant where the ProsperOps service principal is located

Microsoft Customer Agreements

  • Billing Profile Contributor on the billing profile
  • Reservations Purchaser on the root management group
  • Savings Plan Purchaser on the root management group
  • Quota Request Operator on the root management group
  • ProsperOps Custom Role* on the root management group
  • Reservation Administrator on the tenant where the ProsperOps service principal is located

* ProsperOps Custom Role includes the following permissions:
  • Microsoft.Capacity/register/action
  • Microsoft.Sql/register/action
  • Microsoft.DBforMySQL/register/action
  • Microsoft.DBforPostgreSQL/register/action
  • Microsoft.Resources/subscriptions/providers/read