REST API for Azure account & subscription creation and management.
My understanding is that currently they only can add/delete Administrators or accounts only via EA portal, and that subscriptions can be managed only via Account portal. But there is a scenario where these operations need to be integrated with outside operation tools and to be automated. To achieve the scenario, REST API for Azure account & subscription management should be supported.
Hi everyone! We’re excited to announce the public preview of the EA subscription creation API :)
Do we have any REST API to list all the subscriptions showing in EA portal ?
As Marcus said, it would be great to have a way to monitor the amount of subscriptions created with the enrollment account.
the API is now in preview for a long time. In addition there is no API available with which you can monitor the amount of subscriptions that have been generated by a specific enrollment account. This has to be done manually. In an Enterprise environment this is not the way it should work.
For this I request to provide an API call which outputs all the subscriptions which (ever) have been created by the enrollment account. This should work with the credentials of the enrollment account (show "my" subscrioptions) as well as with the credentials of an EA- or Department Admin (show the subscriptions of the enrollment accounts in my enrollment/department)
This has been in preview mode for a year or longer now. When will it be out of preview mode? The 200 limit is not going to work for our automation needs. When will the limitation be removed completely?
Venkatesh Athipatala commented
Default limit is 200 now.
Joe Z commented
Any update on the 50 sub limit?
Really a long way from 'COMPLETED.'
The improvement request explicitly mentions "add/delete Administrators [and] accounts", and I'd argue that the ability to delete subscriptions is very strongly implied.
It's very useful to be able to create subscriptions via the REST API, but on its own, it doesn't enable proper automation.
great work, but following on Jamie Fox and Annette, the 50 subscription limit should be increased.
Jamie Fox commented
My customer Citrix (Top 10 Azure Engineering Customer) is trying to automate the process for creating EA Subscriptions using this API but our experiencing problems with these limitations :
There's a limit of 50 subscriptions per account. After that, subscriptions can only be created by using Account Center.
Question 1 = Can the limit be changed to do more than 50?
• You can't select the tenant for the subscription to be created in. The subscription is always created in the home tenant of the Account Owner.
Question 2 = Could a service principal name be created to handle all accounts or what could we do to allow subscriptions to be created outside of Account Owner>
• No API functions to delete or move subscriptions to another EA account/department
Question 3: Can delete or move options be configured into the API?
Annette Stolz commented
Will we be able to create more than 50 subscriptions at once in the future?
Or is it possible to increase the limit later?
John Lian commented
@Rob, thanks for trying and the feedback! I too noticed some documentation errors with the CLI and have already put in a fix. Was the problem you noticed with CLI as well?
I found some time today to work through the process and here is my feedback so far:
The good: The process is easy; subscription creation is fast. Async and Sync calls are supported just like the rest of the Azure API. I also appreciate the “Owners” field of the SubscriptionCreationParameters object in the request to create the subscription. This makes things easy to manage from the API. Having an at least one subscription provisioned for the EA account is not a problem or road block for us. Completely fair and understandable.
The bad (or room for improvement): Setting up permissions to the application/client is not well documented. I had to modify my command a bit to get it working. That is not as much as a problem as it is just needing some documentation clarification. The only real letdown here is that there is a limit of 50 subscriptions. I hope that there is a limit increase approval process per case (like VM limits in azure), as I know we could get approval for our limit needs. Last, but not least, I was able to easily create a new subscription via API. Now I can loop it 50 or so times. How do I delete these subscriptions 😉
On the topic of subscription cancelation, I did see the following note:
Along with Management Groups and Azure Policy, we're working to improve Azure management for medium to large enterprises. In the future, we also want to provide functionality like subscription rename, cancel, and reactivate via API."
I will be looking forward to subscription rename, cancel, and reactivate via API. Thanks again, I will be watching you guys closely. The sooner I can get this into production, the more Azure we can sell 😊
Mark Hanson commented
Would love to see other subscription level attributes and configuration options added to this - specifically DPOR and Resource Providers. It is great to be able to create a subscription, but if there are still manual steps you have to take after the fact to finish the job, it only gets you part of the way there.
I love you. I am doing back-flips. Going to dig in and see if this will do what I need.
And don't forget to give us feedback below
Gunnar Liljas commented
John, would you please give us an update´?
Please also consider adding subscription removal. The ability to add subscriptions will be great, but I just went through a 5 day process to have 35 subscriptions removed...
Michael O'Day commented
Please, please, please enable REST API/PowerShell/AZ CLI subscription management. As an EA customer, I periodically have to create 10-20 subs at a time and it is a ridiculously painful process -- too many steps, too many time outs and just a ponderous, cumbersome endeavor.
Reddy Sucharit commented
Hello Team, is this available now ? An EA customer is following through with us so they can automate this using Terraform.