Skip to content

Commit 21bd961

Browse files
committed
docs: MCA setup issue
1 parent c0c3dd3 commit 21bd961

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed

README.md

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -20,9 +20,11 @@ To run this module, you need the following:
2020
- Permissions on Azure Resource Level: User Access Administrator on the Management Group that should be managed by meshStack
2121

2222
### If using an Enterprise Agreement
23+
2324
- Permissions on [Enterprise Agreement level](https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/understand-ea-roles): Account Owner for the enrollment account that should be used for creating subscriptions
2425

2526
### If using a Microsoft Customer Agreement
27+
2628
- Permissions in Source Tenant for granting access to the billing account used for subscription creation: Account Administrator
2729

2830
## How to Use This Module
@@ -62,20 +64,24 @@ To run this module, you need the following:
6264
```
6365
6466
#### If Using an Enterprise Agreement
67+
6568
1. Grant access on the enrollment account as described in the section [Use an Enteprise Enrollment](https://docs.meshcloud.io/docs/meshstack.how-to.integrate-meshplatform-azure-manually.html#use-an-enterprise-enrollment).
6669
6770
#### If Using Microsoft Customer Agreement
71+
>
72+
> Until <https://github.com/hashicorp/terraform-provider-azurerm/issues/15211> is resolved, MCA service principal setup can only be done manually.
73+
6874
1. Switch to the Tenant Directory that contains your Billing Account and follow the steps to [Register an Application](https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#register-an-application) and [Add Credentials](https://learn.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app#add-credentials). Make sure to copy down the **Directory (tenant) ID**, **Application (client) ID**, **Object ID** and the **App Secret** value that was generated. The App Secret is only visible during the creation process.
6975
2. You must grant the Enterprise Application permissions on the Billing Account, Billing Profile, or Invoice Section so that it can generate new subscriptions. Follow the steps in [this guide](https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/understand-mca-roles#manage-billing-roles-in-the-azure-portal) to grant the necessary permissions. You must grant one of the following permissions
70-
- Billing Account or Billing Profile: Owner, Contributor
71-
- Invoice Section: Owner, Contributor, Azure Subscription Creator
76+
- Billing Account or Billing Profile: Owner, Contributor
77+
- Invoice Section: Owner, Contributor, Azure Subscription Creator
7278
3. Write down the Billing Scope ID that looks something like this <samp>/providers/Microsoft.Billing/billingAccounts/5e98e158-xxxx-xxxx-xxxx-xxxxxxxxxxxx:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx</samp>
7379
4. Use the following information to configure the platform in meshStack
74-
- Billing Scope
75-
- Destination Tenant ID
76-
- Source Tenant ID
77-
- Billing Account Principal Client ID (Application Client ID that will be used to create new subscriptions)
78-
- Principal Client Secret (Application Secret created in the Source Tenant)
80+
- Billing Scope
81+
- Destination Tenant ID
82+
- Source Tenant ID
83+
- Billing Account Principal Client ID (Application Client ID that will be used to create new subscriptions)
84+
- Principal Client Secret (Application Secret created in the Source Tenant)
7985
8086
### Using CLI
8187

0 commit comments

Comments
 (0)