CANNOT ACCESS SUBSCRIPTIONS - NOT AUTHORIZED

Question

CANNOT ACCESS SUBSCRIPTIONS - NOT AUTHORIZED

P76A28Treasurer 0

[Moderator note: personally identifiable Information removed]@MAINEAA.ORG IS THE ACCOUNT THAT PAYS THE BILLS BUT CANNOT ACCESS INVOICES

MICROSOFT 365 AND OFFICE

0 comments

2 answers

Your answer

Answer 1

Hi,

If you're receiving "Not Authorized" when trying to access Subscriptions or Invoices, the account may not have the required billing permissions even if it is the account used for payment.

For Microsoft 365 Business subscriptions, only accounts assigned roles such as Global Administrator or Billing Administrator can access invoices and subscription management. If the account does not have one of these roles, another administrator will need to grant the appropriate permissions.
User's image For reference: About administrator roles in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn

Please contact your organization's Global Administrator and ask them to verify that your account has been assigned an appropriate billing role, such as Billing Administrator or Global Administrator by following the steps below:

In the admin center, go to Users > Active users.
On Active users, select the user whose administrator role you want to change. In the flyout pane, under Roles, select Manage roles.
Select the administrator role that you want to assign to the user. If you don't see the role you're looking for, select Show all at the bottom of the list.
In the admin center, go to Users > Active users.
On Active users, select the user whose administrator role you want to change. In the flyout pane, under Roles, select Manage roles.
Select the administrator role that you want to assign to the user. If you don't see the role you're looking for, select Show all at the bottom of the list.

For more information, please consult Assign admin roles in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn

If you have any questions or need further assistance, please feel free to share them in the comments on this post.

If the answer is helpful, please click 'Yes' and kindly upvote it.

Note: Please follow the steps in the forum documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

The account used to pay for Microsoft 365 must also have the appropriate Microsoft 365 billing permission; being the payment contact or cardholder alone does not grant invoice access.

Restore invoice access

Ask an existing Microsoft 365 administrator to grant the affected work account Billing Administrator access. Microsoft requires at least this role to view or download business-subscription invoices. ^1^

After the role is assigned:

Sign out of all Microsoft accounts and open a private/incognito browser window to avoid using a different cached account.
Sign in to the Microsoft 365 admin center with the affected organization account.
In Dashboard view, go to Billing > Bills & payments.
In Simplified view, select Products > View invoices.
If multiple billing accounts appear, select Change billing account and check each account.
Select the invoice, then choose Download > Download invoice. ^1^

If your organization uses a Microsoft Customer Agreement

First check whether Billing > Billing accounts displays a billing account with billing profiles. If so, a billing profile owner must grant the account one of these profile roles:

Invoice manager — can view and pay invoices.
Billing profile reader — read-only access.
Billing profile contributor — can edit the profile and pay invoices.

The billing profile owner should:

Go to Billing > Billing accounts.
Select the billing account.
Open Billing profiles and select the applicable profile.
Select Billing profile roles > Assign roles.
Enter the user’s organization email address.
Select Invoice manager, then select Assign. ^2^

These billing-profile roles apply only to Microsoft Customer Agreement billing profiles, not to other Microsoft 365 administration areas.

If no administrator can grant access

If another administrator can sign in, that administrator should assign the required billing role or open a request from Microsoft 365 admin center > Help & support > Contact Support.

If no administrator can access the tenant, contact Microsoft business support by phone and request help restoring administrator access. Microsoft uses account verification, including a code sent to contact information registered in the organization profile. Current regional telephone options are listed in Microsoft’s business-support guidance. ^3^

Have these details available without posting them publicly:

Organization name and domain
Subscription or invoice number
Billing dates and amounts
Accessible registered email address or telephone number
Proof that the caller is authorized to act for the organization

If the subscription was purchased through a reseller

When all subscriptions were purchased through a Microsoft partner or Cloud Solution Provider, contact that partner for the invoice and support. Microsoft’s business-support process directs partner-billed customers back to their partner. ^3^

After access is restored, configure invoice email recipients so the finance team receives future invoices without relying on one administrator. The required role depends on whether the billing account is Microsoft Customer Agreement or Microsoft Online Services Agreement. ^4^

References