Can a non admin user create a Azure free subscription under Tenant? Is this subscription billable to Tenant?

Question

Can a non admin user create a Azure free subscription under Tenant? Is this billable to Tenant? Can they stand up servers?

Answer 1

Hello @Paul Lethin,

Thanks for reaching out to Microsoft Q&A. 

Yes, it is possible for a non-admin user to create Azure free subscription under the tenant. Unfortunately, there is no control in portal to restrict subscription signups (other than license-based subscriptions).  

Also, once the Azure subscription is created, any resources or services consumed within that subscription, including the free tier services, are associated with the tenant. The billing is usually associated with the Azure account and subscription, but the tenant that owns the subscription is responsible for all the activities including billing and resource usage.

Once user has created Azure free subscription you will receive USD 200 in credits which can be used within the first 30 days on most Azure services. Within 30 days of sign-up or upon exhaustion of the credits (whichever occurs first), you must upgrade to a pay-as-you-go subscription by removing the spending limit. This allows continued use of the Azure free account and select free services for the term. When you upgrade to pay-as-you-go subscription, it will be further considered as billable for that tenant.

Further, it will also give them access to stand up servers (like VMs) using that non-admin user account. 

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Thanks & Regards

Janaki Kota

Answer 2

Hello @Paul Lethin,

Thanks for reaching out to Microsoft Q&A. 

Here’s a breakdown of your questions regarding Azure free subscriptions and tenant interaction:

1. Can a non-admin user create an Azure free subscription under a tenant?
   • By default, non-admin users cannot create Azure subscriptions under a tenant unless granted the appropriate permissions.
   • To create an Azure subscription, the user typically needs Owner or Contributor permissions on the tenant level, access to the specific management groups, or subscription,n-level access.
   • A non-admin user will encounter an access error if they attempt to create a subscription without the necessary permissions.
2. Is this billable to the tenant?

Azure free subscriptions are not inherently "billable" unless the user upgrades them to a Pay-As-You-Go subscription or consumes resources beyond the free tier limits.

• However, if the subscription is created under the tenant (associated with the tenant's billing account), any charges incurred (if the free tier limits are exceeded or upgraded) will be billed to the tenant's billing account.
• For independent personal accounts (unlinked to the tenant), charges are billed to the user’s credit card instead.

Can they stand up servers?

• Yes, if a user has successfully created an Azure subscription (free or otherwise), they can provision servers (e.g., virtual machines) and other resources as long as they stay within the subscription limits.
• Free Tier Limits: Azure free accounts allow limited virtual machine hours and specific VM sizes (e.g., B1s). Users can provision servers within these constraints.

Notes:

• To prevent non-admin users from creating subscriptions or managing resources that might incur charges, Azure role-based access control (RBAC) policies or Azure Policy can be used to enforce restrictions.
• Ensure that any permissions are deliberate to avoid accidental charges or compliance issues. Here’s a breakdown of your questions regarding Azure free subscriptions and tenant interaction:
  1. Can a non-admin user create an Azure free subscription under a tenant?
     • By default, non-admin users cannot create Azure subscriptions under a tenant unless granted the appropriate permissions.
     • To create an Azure subscription, the user typically needs Owner or Contributor permissions on the tenant level, a specific management group, or subscription-level access.
     • A non-admin user will encounter an access error if they attempt to create a subscription without the necessary permissions.
  2. Is this billable to the tenant?
     • Azure free subscriptions are not inherently "billable" unless the user upgrades them to a Pay-As-You-Go subscription or consumes resources beyond the free tier limits.
     • However, if the subscription is created under the tenant (associated with the tenant's billing account), any charges incurred (if the free tier limits are exceeded or upgraded) will be billed to the tenant's billing account.
     • For independent personal accounts (unlinked to the tenant), charges are billed to the user’s credit card instead.
  3. Can they stand up servers?
     • Yes, if a user has successfully created an Azure subscription (free or otherwise), they can provision servers (e.g., virtual machines) and other resources as long as they stay within the subscription limits.
     • Free Tier Limits: Azure free accounts allow limited virtual machine hours and specific VM sizes (e.g., B1s). Users can provision servers within these constraints.
  Notes:
  • To prevent non-admin users from creating subscriptions or managing resources that might incur charges, Azure role-based access control (RBAC) policies or Azure Policy can be used to enforce restrictions. As shown below.

Got to Subscription - Click Advance Option - Click Manage policies

• 
  • Ensure that any permissions are deliberate to avoid accidental charges or compliance issues.

Please reach out to me if you need further assistance.

Siri