Managed Service offers in Azure Marketplace

  • Article

This article describes the Managed Service offer type in Azure Marketplace. Managed Service offers allow you to offer resource management services to customers through Azure Lighthouse. You can make these offers available to all potential customers, or only to one or more specific customers. Since you bill customers directly for costs related to these managed services, there are no fees charged by Azure.

Understand Managed Service offers

Managed Service offers streamline the process of onboarding customers to Azure Lighthouse. When a customer purchases an offer in Azure Marketplace, they'll be able to specify which subscriptions and/or resource groups should be onboarded.

For each offer, you define the access that users in your organization will have to work on resources in the customer tenant. This is done through a manifest that specifies the Microsoft Entra users, groups, and service principals that will have access to customer resources, along with roles that define their level of access.

Public and private plans

Each Managed Service offer includes one or more plans. Plans can be either private or public.

If you want to limit your offer to specific customers, you can publish a private plan. When you do so, the plan can only be purchased for the specific subscription IDs that you provide.

Note

Private plans are not supported with subscriptions established through a reseller of the Cloud Solution Provider (CSP) program.

Public plans let you promote your services to new customers. These are usually more appropriate when you only require limited access to the customer's tenant. Once you've established a relationship with a customer, if they decide to grant your organization additional access, you can do so either by publishing a new private plan for that customer only, or by onboarding them for further access using Azure Resource Manager templates.

If appropriate, you can include both public and private plans in the same offer.

Important

Once a plan has been published as public, you can't change it to private. To control which customers can accept your offer and delegate resources, use a private plan. With a public plan, you can't restrict availability to certain customers or even to a certain number of customers (although you can stop selling the plan completely if you choose).

After a customer accepts an offer, you can remove access to a delegation only if you included an Authorization with the Role Definition set to Managed Services Registration Assignment Delete Role when you published the offer. You can also reach out to the customer and ask them to remove your access.

Publish Managed Service offers

To learn how to publish a Managed Service offer, see Publish a Managed Service offer to Azure Marketplace.

Next steps