Azure Account Onboarding Security FAQs

Azure Billing Accounts and Azure Subscriptions are onboarded differently:

• Azure Billing Account: Manages invoices, payments, and cost tracking for one or more subscriptions. This can be onboarded as a billing account, either automatically through a script or manually with instructions.

• Azure Subscriptions (usage accounts): Used to create Azure resources, and it is recommended to onboard all subscriptions as usage accounts.

If your Azure account is an Indirect CSP/MCA/reseller and you don't have billing access from the reseller, the subscription may need to be onboarded as a billing account.

A billing account, also known as an Azure Billing Account, allows Mavvrik to display detailed cost data on its dashboard and perform cost and budget management functions.

A usage account, or Azure Subscription, is used to create Azure resources. Onboarding usage accounts with Mavvrik enables you to view your resource inventory across all subscriptions in one place, analyze resource costs over time, identify unused resources, and receive valuable recommendations.

The guide for onboarding your billing account is available at this link: Azure Billing Account Onboarding Guide

The guide for onboarding your usage account can be found at this link: Azure Usage Account Onboarding Guide

Yes, Mavvrik has implemented stringent measures to ensure the security of your account and data. We use Microsoft Entra ID for access and grant our application only the minimum required read-only permissions. The application's secret keys are securely stored in a vault. For billing and usage accounts, Mavvrik has read-only access through the Microsoft Entra ID app.

Using Azure CLI for onboarding can improve efficiency and reduce the risk of mistakes. When you execute the onboarding command, the system will:

• Display a list of accessible accounts for you to select which one to onboard.

• Create a new Microsoft Entra ID app and grant it read-only access to the app.