I want Global Reader access but no access to subscription billing information // Or need to know if I can see actual billing cost related information with Read access

Amar Nath Tiwari 20 Reputation points
2024-03-18T08:41:50.1+00:00

microsoft.commerce.billing/allEntities/allProperties/readRead all resources of Office 365 billingmicrosoft.commerce.billing/allEntities/allProperties/readRead all resources of Office 365 billingmicrosoft.commerce.billing/purchases/standard/readRead purchase services in M365 Admin Center.Please help me by solving my query-

I want a "Global Reader" access but I don't want to see actual bills or anything related to cost around how much I am getting billed(billing related confidential information) for my subscription or any other services. Kindly let me know if I will be able to see such info based on above mentioned two properties assigned to "Global Reader"

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
808 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. JimmySalian-2011 42,106 Reputation points
    2024-03-18T09:55:51.4633333+00:00

    Hi Amar,

    In this requirement you will have to create a custom role and try this out in the Dev environment to start with follow the steps listed here and it should assist you. https://video2.skills-academy.com/en-us/azure/role-based-access-control/custom-roles#notactions

    Hope this helps.

    JS

    ==

    Please Accept the answer if the information helped you. This will help us and others in the community as well.

    0 comments No comments

  2. Matthew Josephs 21 Reputation points
    2024-03-18T11:24:55.73+00:00

    Hi Amar,

    The global reader EntraID role will allow you to view M365 billing information such as invoices in the M365 admin center, but will not allow you to see any billing data associated with the azure subscriptions linked to the tenant. As such, if you would like to have a role that provides similar access to global reader in EntraID, but without access to view billing data, you will need to create a new custom role in EntraID.

    For more information on how to accomplish this, please view the following Microsoft docs article:

    https://video2.skills-academy.com/en-us/entra/identity/role-based-access-control/custom-create

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.