Billing Role Definitions - List By Enrollment Account

Lists the role definitions for a enrollmentAccount. The operation is supported only for billing accounts with agreement type Enterprise Agreement.

GET https://management.azure.com/providers/Microsoft.Billing/billingAccounts/{billingAccountName}/enrollmentAccounts/{enrollmentAccountName}/billingRoleDefinitions?api-version=2019-10-01-preview

URI Parameters

Name In Required Type Description
billingAccountName
path True

string

The ID that uniquely identifies a billing account.

enrollmentAccountName
path True

string

The ID that uniquely identifies an enrollment account.

api-version
query True

string

The version of the API to be used with the client request. The current version is 2019-10-01-preview.

Responses

Name Type Description
200 OK

BillingRoleDefinitionListResult

OK. The request has succeeded.

Other Status Codes

ErrorResponse

Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

EnrollmentAccountRoleDefinitionsList

Sample Request

GET https://management.azure.com/providers/Microsoft.Billing/billingAccounts/{billingAccountName}/enrollmentAccounts/{enrollmentAccountName}/billingRoleDefinitions?api-version=2019-10-01-preview

Sample Response

{
  "value": [
    {
      "id": "/providers/Microsoft.Billing/billingAccounts/7898901/enrollmentAccounts/225314/billingRoleDefinitions/c15c22c0-9faf-424c-9b7e-bd91c06a240b",
      "name": "c15c22c0-9faf-424c-9b7e-bd91c06a240b",
      "properties": {
        "description": "The account owner role gives the user read/write permissions to an Enrollment Account.",
        "permissions": [
          {
            "actions": [
              "Microsoft.Billing/billingAccounts/enrollmentAccounts/read",
              "Microsoft.Billing/billingAccounts/enrollmentAccounts/write",
              "Microsoft.Billing/billingAccounts/enrollmentAccounts/billingSubscriptions/read",
              "Microsoft.Billing/billingAccounts/enrollmentAccounts/billingSubscriptions/write"
            ]
          }
        ],
        "roleName": "Enrollment account owner"
      },
      "type": "Microsoft.Billing/billingAccounts/enrollmentAccounts/billingRoleDefinitions"
    },
    {
      "id": "/providers/Microsoft.Billing/billingAccounts/7898901/enrollmentAccounts/225314/billingRoleDefinitions/a0bcee42-bf30-4d1b-926a-48d21664ef71",
      "name": "a0bcee42-bf30-4d1b-926a-48d21664ef71",
      "properties": {
        "description": "The enrollent account subscription creator role gives the user permissions to create a subscription under the enrollment account.",
        "permissions": [
          {
            "actions": [
              "Microsoft.Billing/billingAccounts/enrollmentAccounts/read",
              "Microsoft.Subscription/subscriptions/write"
            ]
          }
        ],
        "roleName": "Enrollment account subscription creator"
      },
      "type": "Microsoft.Billing/billingAccounts/enrollmentAccounts/billingRoleDefinitions"
    }
  ]
}

Definitions

Name Description
BillingPermissionsProperties

The set of allowed action and not allowed actions a caller has on a billing account

BillingRoleDefinition

The properties of a role definition.

BillingRoleDefinitionListResult

The list of role definitions.

ErrorDetails

The details of the error.

ErrorResponse

Error response indicates that the service is not able to process the incoming request. The reason is provided in the error message.

ErrorSubDetails

BillingPermissionsProperties

The set of allowed action and not allowed actions a caller has on a billing account

Name Type Description
actions

string[]

The set of actions that the caller is allowed to perform.

notActions

string[]

The set of actions that the caller is not allowed to perform.

BillingRoleDefinition

The properties of a role definition.

Name Type Description
id

string

Resource Id.

name

string

Resource name.

properties.description

string

The role description

properties.permissions

BillingPermissionsProperties[]

The billingPermissions the role has

properties.roleName

string

The name of the role

type

string

Resource type.

BillingRoleDefinitionListResult

The list of role definitions.

Name Type Description
nextLink

string

The link (url) to the next page of results.

value

BillingRoleDefinition[]

The role definitions.

ErrorDetails

The details of the error.

Name Type Description
code

string

Error code.

details

ErrorSubDetails[]

The sub details of the error.

message

string

Error message indicating why the operation failed.

target

string

The target of the particular error.

ErrorResponse

Error response indicates that the service is not able to process the incoming request. The reason is provided in the error message.

Name Type Description
error

ErrorDetails

The details of the error.

ErrorSubDetails

Name Type Description
code

string

Error code.

message

string

Error message indicating why the operation failed.

target

string

The target of the particular error.