Easiest way to identify the Enterprise Administrator for Azure

Allie DeLonay 0 Reputation points
2026-11-11T17:11:31.9866667+00:00

I am the product manager for a Azure marketplace offering and one huge hurdle we've encountered is that when we try to support organizations through the subscription process through marketplace, they have a hard time figuring out who at their organization has the ability to purchase a marketplace plan or who has the ability to accept a private offering. We know that the eligibility report gives information on whether YOU can do these things, but there doesn't seem to be an easy way for organizations to find who at their organization has these permissions. Is there a way to do this today? If not, can there be a feature added?

Azure Managed Applications
Azure Managed Applications

An Azure service that enables managed service providers, independent software vendors, and enterprise IT teams to deliver turnkey solutions through the Azure Marketplace or service catalog.

0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-11-11T17:13:23.7966667+00:00

    Microsoft’s documented workflow does not provide a tenant-wide Marketplace purchaser directory; customers must identify the billing agreement and inspect role assignments at the relevant billing-account and subscription scopes.

    A user without access to the applicable billing scope generally cannot enumerate its billing administrators. Billing permissions are separate from Microsoft Entra directory roles and subscription-level Azure RBAC roles.

    1. Identify the customer’s billing agreement

    In the Azure portal:

    1. Open Cost Management + Billing.
    2. Select Settings > Properties.
    3. Note whether the billing account type is:
      • Enterprise Agreement (EA)
      • Microsoft Customer Agreement (MCA)
      • Microsoft Online Services Program (MOSP)

    If the user has several billing scopes, use Cost Management + Billing > Billing scopes and check each account. ^1^

    2. Find who can accept the private offer

    The required person depends on the agreement:

    Agreement Role that can accept
    EA Enterprise Administrator
    MCA Billing Account Owner or Billing Account Contributor
    MOSP Account Administrator

    These are billing roles—not the Microsoft Entra Global Administrator role or the Azure subscription Owner role. ^2^

    Enterprise Agreement

    A user who can access the enrollment should open:

    Azure portal > Cost Management + Billing > Billing scopes > select the EA billing account > Access Control (IAM)

    That page lists the enrollment’s Enterprise Administrators. Existing EA administrators can also add another administrator through + Add > Enterprise administrator. Only an existing EA administrator can create another one. ^3^

    If no active EA administrator can be reached:

    1. Open an Azure support request.
    2. Include the enrollment number, relevant account details, authentication type, and approval from an existing Enterprise Administrator when available.
    3. If there is no active Enterprise Administrator, contact the organization’s licensing partner to update the EA contact information. ^3^

    Microsoft Customer Agreement

    Open:

    Azure portal > Cost Management + Billing > select the billing account > Access control (IAM)

    The role-assignment list shows the Billing Account Owners and Contributors. Billing Account Owners, Contributors, and Readers can view billing-account role assignments, but only an Owner can grant billing-account permissions. ^4^

    If nobody available can see the MCA billing administrators, a Microsoft Entra Global Administrator can conditionally recover access:

    1. Open Cost Management + Billing > Billing scopes.
    2. Enable the option to view all billing accounts.
    3. Select the MCA billing account.
    4. Open Access Control (IAM) > Add.
    5. Assign yourself Billing account owner.
    6. Review the billing-account role assignments.

    This elevation applies to MCA or Microsoft Partner Agreement billing accounts, not EA enrollments. ^5^

    3. Separately identify who can purchase or subscribe

    For EA and MCA private offers using separate acceptance and purchase:

    1. Open Subscriptions and select the intended subscription.
    2. Select Access control (IAM).
    3. Select View access to this resource.
    4. Find users assigned Owner or Contributor.

    For VM software reservation offers, the required purchaser is a subscription Owner or Reservation Purchaser; Contributor alone is insufficient. For MOSP, the Account Administrator performs both acceptance and purchase. ^2^

    These assignments identify users with the required subscription role, but do not by themselves guarantee a successful purchase. The billing account must also be eligible, Marketplace purchasing must be enabled, purchase controls and Private Marketplace approvals must permit the offer, and the subscription must align with the offer’s billing account and directory. ^1^

    Eligible single-click purchases combine acceptance and purchase submission, but they do not eliminate the underlying billing, subscription, policy, or organizational authorization requirements. ^2^

    Product enhancement request

    There is no documented commitment for a tenant-wide purchaser directory. To request one, open Azure portal > Help + Support > New support request, choose Billing or Subscription management, then Marketplace, and ask that the administrator-discovery enhancement be routed to the Marketplace product team. This creates a trackable request but does not imply roadmap commitment. ^6^


    References

    1. Step 1 - Prepare your account for private offers
    2. Roles and permissions
    3. EA Billing administration on the Azure portal
    4. Understand Microsoft Customer Agreement administrative roles in Azure
    5. Elevate access to manage billing accounts
    6. How to get support for Microsoft Marketplace
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.