Accessing budgets and cost analysis in Azure subscription

Tobi 0 Reputation points
2024-09-18T12:10:29.7866667+00:00

We have a nonprofit granted Azure subscription which I have been assigned as 'owner' of but when I try to view the budgets or cost analysis sections get the error 'Access denied, you do not have Cost Management read access to subscription please contact an owner of this subscription for access.

As an owner I have also granted myself the roles billing reader, cost management contributor, and cost management reader but I still get the access denied error.

Has anyone else had this or know how to access? We don't want to start using our credits until we can actually see how much we are spending and can setup alerts.

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
38,792 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vinodh247 18,501 Reputation points
    2024-09-18T12:31:24.2966667+00:00

    Hi Tobi,

    Thanks for reaching out to Microsoft Q&A.

    The issue you are experiencing may be due to a permission or role propagation delay or other underlying access control mechanisms in azure, even though you've assigned yourself the relevant roles. Here are a few steps to troubleshoot and potentially resolve this issue:

    • Ensure the roles (Billing Reader, Cost Management Contributor, Cost Management Reader) are applied at the subscription level and not at a resource group or management group level. Go to Subscriptions → Select your subscription. Under Access control (IAM), verify that you are assigned those roles at the subscription level.
    • Sometimes, Azure can take a little time to propagate role assignments across its services. Wait for 10-15 minutes after assigning yourself these roles and try accessing the Budgets or Cost Analysis section again.
    • Try assigning the Global Reader role at the subscription level, as this role provides read-only access to the entire subscription, including cost management. It can sometimes resolve access issues in scenarios like this.
    • If you are using Azure AD identities to manage permissions, ensure that there is no conflicting deny assignment blocking your access. Check for any deny assignments or policies at the subscription level that might be restricting access.
    • For nonprofit grants, sometimes access to billing-related information is managed at the billing account level, separate from subscription-level roles. You might need additional permissions for the billing account --> Go to Cost Management + Billing → Billing accounts and check if you need to assign any roles at this level.

    If none of the above steps resolves the issue, consider opening a ticket with azure support.

    Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.