Azure Lighthouse Service REST API

Question

We have many subscriptions, and some of them are managed by the lighthouse service. We would like to know which of them are managed by lighthouse using only rest api. How can we find out?

Answer 1

Hi ,

Thanks for reaching out to Microsoft Q&A.

You can use the Azure Lighthouse REST API to determine which of your subscriptions are managed by lighthouse. Specifically, you can query the Delegated Resource Management (DRM) assignments to check which subscriptions have been onboarded.

Steps to Identify Managed Subscriptions via REST API:

1. Get the List of Delegated Subscriptions

Use the following REST API to list all delegated subscriptions managed via Azure Lighthouse:

GET https://management.azure.com/providers/Microsoft.ManagedServices/registrationAssignments?api-version=2022-08-01

• This API lists all registration assignments (delegated subscriptions) under your management.

2. Filter Results for Your Subscriptions

• The response will contain details of delegated subscriptions.
• Look for the properties.managedByTenantId field. If the tenantId of your organization is present there, it means that subscription is being managed by Azure Lighthouse.

3. Get Specific Subscription Delegation Details

If you want to check whether a specific subscription is managed by Lighthouse, use:

GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.ManagedServices/registrationAssignments?api-version=2022-08-01

Replace {subscriptionId} with the actual subscription ID.

4. Authentication

Ensure that you authenticate using AAD with an appropriate role (such as Reader or Owner on the managing tenant).

 Please feel free to click the 'Upvote' (Thumbs-up) button and 'Accept as Answer'. This helps the community by allowing others with similar queries to easily find the solution.