Azure Account Onboarding Security FAQs
Our commitment to a seamless onboarding experience includes providing comprehensive answers to frequently asked questions. Here are some of the key FAQs related to Azure Account Onboarding with DigitalEx:
Q1: What is the process for onboarding an Azure account with DigitalEx?
Azure Billing Accounts and Azure Subscriptions are onboarded differently:
Azure Billing Account: Manages invoices, payments, and cost tracking for one or more subscriptions. This can be onboarded as a billing account, either automatically through a script or manually with instructions.
Azure Subscriptions (usage accounts): Used to create Azure resources, and it is recommended to onboard all subscriptions as usage accounts.
If your Azure account is an Indirect CSP/MCA/reseller and you don't have billing access from the reseller, the subscription may need to be onboarded as a billing account.
Q2: What is a billing account and why does DigitalEx need it?
A billing account, also known as an Azure Billing Account, allows DigitalEx to display detailed cost data on its dashboard and perform cost and budget management functions.
Q3: What is a usage account and why does DigitalEx need it?
A usage account, or Azure Subscription, is used to create Azure resources. Onboarding usage accounts with DigitalEx enables you to view your resource inventory across all subscriptions in one place, analyze resource costs over time, identify unused resources, and receive valuable recommendations.
Q4: How do I access the guide for onboarding my billing account?
The guide for onboarding your billing account is available at this link: Azure Billing Account Onboarding Guide
Q5: How do I access the guide for onboarding my usage account?
The guide for onboarding your usage account can be found at this link: Azure Usage Account Onboarding Guide
Q6: Is it secure to onboard my Azure account with DigitalEx? If so, why?
Yes, DigitalEx has implemented stringent measures to ensure the security of your account and data. We use Azure Active Directory (AAD) for access and grant our application only the minimum required read-only permissions. The application's secret keys are securely stored in a vault. For billing and usage accounts, DigitalEx has read access only to azure AD app.
Q7: How does Azure CLI onboarding for billing accounts work?
Using Azure CLI for onboarding can improve efficiency and reduce the risk of mistakes. When you execute the onboarding command, the system will:
Display a list of accessible accounts for you to select which one to onboard.
Create a new Azure AAD app and grant it read-only access to the app.
Your understanding and cooperation will significantly improve the onboarding process, ensuring we can provide the best possible service.