Azure Reservations
-
Create the ability to give permissions to all subscription reservations to a single principle.
We would like to have the ability to give permissions to all Reservations within a single EA to a single principle. This would include Enterprise Applications, Users and Groups.
From what we can tell, when Azure created the Reservation capabilities in their platform, they introduced a new abstract layer of authorization strictly around the Reservations themselves. When reservations are created the only people allowed to view them are the Owner of the subscription that the Reservations were created within, and the user that actual purchased the reservation.
The primary limitation to this method is that there is no a way…
89 votesWe will soon have a feature that will let all Enterprise Administrators to see and manage all reservations, without being explicitly added to them.
-
Resource's Reservation
Please, return to us our lovely prepaid plans or some equivalents of them! Because otherwise AWS often wins, when you decided between their reserved instances pricing and your on-demand pricing!
1 voteThanks for your feedback, have you considered an Enterprise Agreement http://azure.microsoft.com/en-us/pricing/enterprise-agreement/ which may be suitable for your needs?
Regards,
Azure Billing Team -
Permission set per Management Certificate
It would be great to be able to configure which of the management APIs a specific management certificate is allowed to use. Currently there is no real difference between certificates, so having multiple are of limited value.
If management certificates are treated as roles, then it would provide many configuration options and better security w.r.t. how certificates can be used.
I could for instance create a certificate that only allows existing virtual machines to be started, but nothing else and then deploy that with an application, to a perhaps-not-fully-secure environment, without the danger of allowing someone who gets hold of…
1 voteWe have some changes coming to our platform that will affect how clients can authenticate. Stay tuned for more details.
- Don't see your idea?