https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/create-new-tenant

where not specified, your current user with appropriate permissions should be used when creating resources

Step

Portal

Docs

Image

create a new tenant

create a new management account

create a user called ea_subs as an administrator of the tenant

create a new service principal

  • create a new service principal if you intend to provide subscriptions in a scripted or automated manner

  • add roles and permissions to the service principal

Step

Portal

Docs

Image

Role and Resource Mapping from Billing to Azure Resources

As a Billing Administrator

Create a new Department (optional)

Create a new (enrolment) Account

Logged in as the ea_subs user

Assign SP to Enrolment Account

Assign Create Subscription to SP

You can now manually create new subscriptions, located in Billing Accounts where you have been assigned in the IAM roles

You can use the Service Principal in any scripting, deployment or automation that require a new subscription

to access subscriptions under the new tenant will require local or guest accounts for users - and will require roles assigned

Manually Creating Subscriptions

Step

Portal

Docs

Image

As a Billing Administrator

Create a new Department (optional)

Create a new (enrolment) Account

Logged in as the ea_subs user

Assign SP to Enrolment Account

Assign Create Subscription to SP

Programatically Creating Subscriptions