Manage billing across multiple tenants using associated billing tenants

You can simplify billing management for your organization by creating multitenant billing relationships using associated billing tenants. A multitenant billing relationship lets you securely share your organization’s billing account with other tenants, while maintaining control over your billing data. You can move subscriptions in different tenants and provide users in those tenants with access to your organization’s billing account. This relationship lets users on those tenants do billing activities like viewing and downloading invoices or managing licenses.

Understand tenant types

Primary billing tenant: The primary billing tenant is the tenant used when the billing account is set up. By default, all subscriptions are created in this tenant and only users from this tenant can get access to the billing account.

Associated billing tenants: An associated billing tenant is a tenant that is linked to your primary billing tenant’s billing account. You can move Microsoft 365 subscriptions to these tenants. You can also assign billing account roles to users in associated billing tenants.

Prerequisites

You must have a Microsoft Customer Agreement - enterprise billing account to use associated billing tenants. An enterprise billing account is a billing account that is created by working with a Microsoft sales representative.

If you don't have one, you don't see the Associated billing tenants option in the Azure portal. You also can't move subscriptions to other tenants or assign roles to users in other tenants.

To learn more about types of billing accounts, see Billing accounts and scopes in the Azure portal.

Access settings for associated billing tenants

When you add an associated billing tenant, you can enable one or both of the following access settings:

• Billing management: Billing management lets billing account owners assign roles to users in an associated billing tenant, giving them permission to access billing information and make purchasing decisions.
• Provisioning: Provisioning allows you to move Microsoft 365 subscriptions to the associated billing tenants.

Add an associated billing tenant

Before you begin, make sure you have either the tenant ID, or the primary domain name for the tenant you want to add. For more information, see Find a tenant ID or domain name.

1. Sign in to the Azure portal.

2. Search for Cost Management + Billing.
   

3. Select Access control (IAM) on the left side of the page.

4. On the Access control (IAM) page, select Associated billing tenants at the top of the page.
   

5. On the Associated billing tenants page, select Add at the top of the page.

6. On the Add tenant page, enter a tenant ID or domain name, provide a friendly name and then select one or both options for access settings. For more information about access settings, see Access settings for associated billing tenant.

   Note

   The Tenant ID is case sensitive.

   

   Note

   The friendly name of an associated billing tenant is used to easily identify the tenant in the Cost management + Billing section. The name is different from the display name of the tenant in Microsoft Entra ID.

7. Select Save.

If the Provisioning access setting is turned on, a unique link is created for you to send to the global administrator of the associated billing tenant. They must accept the request before you can move subscriptions to their tenant.

Assign roles to users from the associated billing tenant

Before assigning roles, make sure you add a tenant as an associated billing tenant and enable billing management access setting.

To assign roles and send an email invitation

1. Sign in to the Azure portal.
2. Search for Cost Management + Billing.
   
3. Select Access control (IAM) on the left side of the page.
4. On the Access control (IAM) page, select Add at the top of the page.
   
5. In the Add role assignment pane, select a role, select the associated billing tenant from the tenant dropdown, then enter the email address of the users, groups, or apps to whom you want to assign roles.
6. Select Add.
   
7. The users receive an email with a link to review the role assignment request. After they accept the role, they have access to your billing account.

To manually share the invitation link

If the users can't receive emails, you can copy the review link and share it with them. Follow the steps in the preceding section then:

1. Select Manage requests at the top of the Access control (IAM) page.
   
2. Select the role assignment request.
   
3. Copy the request URL.
   
4. Manually share the link with the user.

Role assignments through associated billing tenants vs Azure B2B

Choosing to assign roles to users from associated billing tenants might be the right approach, depending on the needs of your organization. The following illustrations and table compare using associated billing tenants and Azure B2B to help you decide which approach is right for your organization. To learn more about Azure B2B, see B2B collaboration overview

Consideration	Associated billing tenants	Azure B2B
Security	The users that you invite to share your billing account follow their tenant's security policies.	The users that you invite to share your billing account follow your tenant's security policies.
Access	The users get access to your billing account in their own tenant and can manage billing and make purchases without switching tenants.	External guest identities are created for users in your tenant and these identities get access to your billing account. Users would have to switch tenant to manage billing and make purchases.

Move Azure subscriptions to an associated billing tenant

The provisioning setting that you enable for an associated billing tenant doesn't apply for Azure subscriptions. To move Azure subscriptions to an associated billing tenant, see Associate or add an Azure subscription to your Microsoft Entra tenant.

Need help? Contact support

If you need help, contact support to get your issue resolved quickly.

Next steps

• Billing administrative roles
• Associate or add an Azure subscription to your Microsoft Entra tenant