Fix Reservations IAM
As the Account Administrator for my enrolment, I have no view of RIs which have been provisioned under the enrolment by default unless “Owner” access is explicitly provided by the “Contributor” who purchased the RI.
In effect, I have no ability to manage RI resources by default; and I may potentially not even know of their existence until I receive the quarterly invoice.
Please make the RIs accessible as per the standard IAM policy which applies to all other Azure resources (ie. Account and Service Administrators by default can view).
The Azure Doc (link below) states that "By default, the person that bought the reservation and the account administrator have the Owner role on the reservation."
In our case, this was not the case, as such I believe this is a bug.
Eric Hebert commented
Here we are March 25th 2020 and still not fixed...
Calum O commented
Is this still in the backlog? Seems like a pretty standard feature to expect out of something like this. Are there any ETAs? I see this as a bug, more than an idea.
Christian Margadant commented
@Yashesvi Sharma: Is there any news about this feature in the backlog?
It would be a great improvement for the management of reservations.
Rich Davies commented
Equally, it should be possible to have a RBAC role for purchasing reserved instances which doesn't require the purchaser to be an Admin for the subscription. Purchase of RI should be fundamentally a billing activity. I don't want my billing people to be admins of every subscription: what happened to the principle of least privilege.
Yashesvi Sharma commented
Hello, I am on the reservation team. Thanks for the feedback, we have this feature in the backlog. Regarding your specific issue, can you please reach out to me at yashar[@]microsoft[dot]com