Proposed Pull Request Change

📄 Document Links

View on GitHub View on Microsoft Learn

--- title: Programmatically create Azure subscriptions for a Microsoft Customer Agreement with the latest APIs description: Learn how to create Azure subscriptions for a Microsoft Customer Agreement programmatically using the latest versions of REST API, Azure CLI, Azure PowerShell, and Azure Resource Manager templates. author: Nicholak-MS ms.author: nicholak ms.reviewer: nicholak ms.service: cost-management-billing ms.subservice: billing ms.topic: how-to ms.date: 12/29/2025 ms.custom: devx-track-azurepowershell, devx-track-azurecli, devx-track-arm-template, devx-track-bicep service.tree.id: b69a7832-2929-4f60-bf9d-c6784a865ed8 --- # Programmatically create Azure subscriptions for a Microsoft Customer Agreement with the latest APIs This article helps you programmatically create Azure subscriptions for a Microsoft Customer Agreement using the most recent API versions. If you're still using the older preview version, see [Programmatically create Azure subscriptions with legacy APIs](programmatically-create-subscription-preview.md). In this article, you learn how to create subscriptions programmatically using Azure Resource Manager. If you need to create an Azure MCA subscription across Microsoft Entra tenants, see [Programmatically create MCA subscriptions across Microsoft Entra tenants](programmatically-create-subscription-microsoft-customer-agreement-across-tenants.md). When you create an Azure subscription programmatically, that subscription is governed by the agreement under which you obtained Azure services from Microsoft or an authorized reseller. For more information, see [Microsoft Azure Legal Information](https://azure.microsoft.com/support/legal/). [!INCLUDE [updated-for-az](~/reusable-content/ce-skilling/azure/includes/updated-for-az.md)] You can't create support plans programmatically. You can buy a new support plan or upgrade one in the Azure portal. Navigate to **Help + support** and then at the top of the page, select **Choose the right support plan**. ## Prerequisites You must have an owner, contributor, or Azure subscription creator role on an invoice section or owner or contributor role on a billing profile or a billing account to create subscriptions. You can also give the same role to a service principal name (SPN). For more information about roles and assigning permission to them, see [Subscription billing roles and tasks](understand-mca-roles.md#subscription-billing-roles-and-tasks). If you're using an SPN to create subscriptions, use the ObjectId of the Microsoft Entra Enterprise application as the Principal ID using [Microsoft Graph PowerShell](/powershell/module/microsoft.graph.applications/get-mgserviceprincipal) or [Azure CLI](/cli/azure/ad/sp#az-ad-sp-list). > [!NOTE] > Permissions differ between the legacy API (api-version=2018-03-01-preview) and the latest API (api-version=2020-05-01). Although you may have a role sufficient to use the legacy API, you might need an EA admin to delegate you a role to use the latest API. If you don't know whether you have access to a Microsoft Customer Agreement account, see [Check access to a Microsoft Customer Agreement](../understand/mca-overview.md#check-access-to-a-microsoft-customer-agreement). ## Find billing accounts that you have access to Make the following request to list all the billing accounts. ### [REST](#tab/rest) ```json GET https://management.azure.com/providers/Microsoft.Billing/billingaccounts/?api-version=2020-05-01 ``` The API response lists the billing accounts that you have access to. ```json { "value": [ { "id": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx", "name": "aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx", "properties": { "accountStatus": "Active", "accountType": "Enterprise", "agreementType": "MicrosoftCustomerAgreement", "billingProfiles": { "hasMoreResults": false }, "displayName": "Contoso", "hasReadAccess": false }, "type": "Microsoft.Billing/billingAccounts" } ] } ``` Use the `displayName` property to identify the billing account for which you want to create subscriptions. Ensure, the agreementType of the account is *MicrosoftCustomerAgreement*. Copy the `name` of the account. For example, to create a subscription for the `Contoso` billing account, copy `aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx`. Paste the value somewhere so that you can use it in the next step. ### [PowerShell](#tab/azure-powershell) ```azurepowershell Get-AzBillingAccount ``` You'll get back a list of all billing accounts that you have access to ```json Name : aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx DisplayName : Contoso AccountStatus : Active AccountType : Enterprise AgreementType : MicrosoftCustomerAgreement HasReadAccess : True ``` Use the `displayName` property to identify the billing account for which you want to create subscriptions. Ensure, the agreementType of the account is *MicrosoftCustomerAgreement*. Copy the `name` of the account. For example, to create a subscription for the `Contoso` billing account, copy `aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx`. Paste the value somewhere so that you can use it in the next step. ### [Azure CLI](#tab/azure-cli) ```azurecli az billing account list ``` You'll get back a list of all billing accounts that you have access to. ```json [ { "accountStatus": "Active", "accountType": "Enterprise", "agreementType": "MicrosoftCustomerAgreement", "billingProfiles": { "hasMoreResults": false, "value": null }, "departments": null, "displayName": "Contoso", "enrollmentAccounts": null, "enrollmentDetails": null, "hasReadAccess": true, "id": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx", "name": "aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx", "soldTo": null, "type": "Microsoft.Billing/billingAccounts" } ] ``` Use the `displayName` property to identify the billing account for which you want to create subscriptions. Ensure, the agreementType of the account is *MicrosoftCustomerAgreement*. Copy the `name` of the account. For example, to create a subscription for the `Contoso` billing account, copy `aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx`. Paste the value somewhere so that you can use it in the next step. --- ## Find billing profiles & invoice sections to create subscriptions The charges for your subscription appear on a section of a billing profile's invoice. Use the following API to get the list of billing profiles and invoice sections on which you have permission to create Azure subscriptions. First you get the list of billing profiles under the billing account that you have access to (Use the `name` that you got from the previous step) ### [REST](#tab/rest) ```json GET https://management.azure.com/providers/Microsoft.Billing/billingaccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingprofiles/?api-version=2020-05-01 ``` The API response lists all the billing profiles on which you have access to create subscriptions: ```json { "value": [ { "id": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx", "name": "AW4F-xxxx-xxx-xxx", "properties": { "billingRelationshipType": "Direct", "billTo": { "addressLine1": "One Microsoft Way", "city": "Redmond", "companyName": "Contoso", "country": "US", "email": "kenny@contoso.com", "phoneNumber": "425xxxxxxx", "postalCode": "98052", "region": "WA" }, "currency": "USD", "displayName": "Contoso Billing Profile", "enabledAzurePlans": [ { "skuId": "0002", "skuDescription": "Microsoft Azure Plan for DevTest" }, { "skuId": "0001", "skuDescription": "Microsoft Azure Plan" } ], "hasReadAccess": true, "invoiceDay": 5, "invoiceEmailOptIn": false, "invoiceSections": { "hasMoreResults": false }, "poNumber": "001", "spendingLimit": "Off", "status": "Active", "systemId": "AW4F-xxxx-xxx-xxx", "targetClouds": [] }, "type": "Microsoft.Billing/billingAccounts/billingProfiles" } ] } ``` Copy the `id` to next identify the invoice sections underneath the billing profile. For example, copy `/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx` and call the following API. ```json GET https://management.azure.com/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoicesections?api-version=2020-05-01 ``` ### Response ```json { "totalCount": 1, "value": [ { "id": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx", "name": "SH3V-xxxx-xxx-xxx", "properties": { "displayName": "Development", "state": "Active", "systemId": "SH3V-xxxx-xxx-xxx" }, "type": "Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections" } ] } ``` Use the `id` property to identify the invoice section for which you want to create subscriptions. Copy the entire string. For example, `/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx`. ### [PowerShell](#tab/azure-powershell) ```azurepowershell Get-AzBillingProfile -BillingAccountName aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx ``` You'll get the list of billing profiles under this account as part of the response. ```json Name : AW4F-xxxx-xxx-xxx DisplayName : Contoso Billing Profile Currency : USD InvoiceDay : 5 InvoiceEmailOptIn : True SpendingLimit : Off Status : Active EnabledAzurePlans : {0002, 0001} HasReadAccess : True BillTo : CompanyName : Contoso AddressLine1 : One Microsoft Way AddressLine2 : City : Redmond Region : WA Country : US PostalCode : 98052 ``` Note the `name` of the billing profile from the above response. The next step is to get the invoice section that you have access to underneath this billing profile. You'll need the `name` of the billing account and billing profile. ```azurepowershell Get-AzInvoiceSection -BillingAccountName aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx -BillingProfileName AW4F-xxxx-xxx-xxx ``` You'll get the invoice section returned. ```json Name : SH3V-xxxx-xxx-xxx DisplayName : Development ``` The `name` above is the Invoice section name you need to create a subscription under. Construct your billing scope using the format `/providers/Microsoft.Billing/billingAccounts/<BillingAccountName>/billingProfiles/<BillingProfileName>/invoiceSections/<InvoiceSectionName>`. In this example, this value equates to `"/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx"`. ### [Azure CLI](#tab/azure-cli) ```azurecli az billing profile list --account-name "aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx" --expand "InvoiceSections" ``` This API returns the list of billing profiles and invoice sections under the provided billing account. ```json [ { "billTo": { "addressLine1": "One Microsoft Way", "addressLine2": "", "addressLine3": null, "city": "Redmond", "companyName": "Contoso", "country": "US", "district": null, "email": null, "firstName": null, "lastName": null, "phoneNumber": null, "postalCode": "98052", "region": "WA" }, "billingRelationshipType": "Direct", "currency": "USD", "displayName": "Contoso Billing Profile", "enabledAzurePlans": [ { "skuDescription": "Microsoft Azure Plan for DevTest", "skuId": "0002" }, { "skuDescription": "Microsoft Azure Plan", "skuId": "0001" } ], "hasReadAccess": true, "id": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx", "indirectRelationshipInfo": null, "invoiceDay": 5, "invoiceEmailOptIn": true, "invoiceSections": { "hasMoreResults": false, "value": [ { "displayName": "Field_Led_Test_Ace", "id": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx", "labels": null, "name": "SH3V-xxxx-xxx-xxx", "state": "Active", "systemId": "SH3V-xxxx-xxx-xxx", "targetCloud": null, "type": "Microsoft.Billing/billingAccounts/billingProfiles/invoiceSections" } ] }, "name": "AW4F-xxxx-xxx-xxx", "poNumber": null, "spendingLimit": "Off", "status": "Warned", "statusReasonCode": "PastDue", "systemId": "AW4F-xxxx-xxx-xxx", "targetClouds": [], "type": "Microsoft.Billing/billingAccounts/billingProfiles" } ] ``` Use the `id` property under the invoice section object to identify the invoice section for which you want to create subscriptions. Copy the entire string. For example, /providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx. --- ## Create a subscription for an invoice section The following example creates a subscription named *Dev Team subscription* for the *Development* invoice section. The subscription is billed to the *Contoso Billing Profile* billing profile and appears on the *Development* section of its invoice. You use the copied billing scope from the previous step: `/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx`. ### [REST](#tab/rest) Replace the placeholder value `sampleAlias` as needed. For more information on these REST calls, see [Create](/rest/api/subscription/alias/create) and [Get](/rest/api/subscription/alias/get). ```json PUT https://management.azure.com/providers/Microsoft.Subscription/aliases/{{guid}}?api-version=2021-10-01api-version=2021-10-01 ``` ### Request body ```json { "properties": { "billingScope": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx", "DisplayName": "Dev Team subscription", "Workload": "Production" } } ``` ### Response ```json { "id": "/providers/Microsoft.Subscription/aliases/sampleAlias", "name": "sampleAlias", "type": "Microsoft.Subscription/aliases", "properties": { "subscriptionId": "aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e", "provisioningState": "Accepted" } } ``` You can do a GET on the same URL to get the status of the request. ### Request ```json GET https://management.azure.com/providers/Microsoft.Subscription/aliases/{{guid}}?api-version=2021-10-01 ``` ### Response ```json { "id": "/providers/Microsoft.Subscription/aliases/sampleAlias", "name": "sampleAlias", "type": "Microsoft.Subscription/aliases", "properties": { "subscriptionId": "aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e", "provisioningState": "Succeeded" } } ``` An in-progress status is returned as an `Accepted` state under `provisioningState`. ### [PowerShell](#tab/azure-powershell) To install the version of the module that contains the `New-AzSubscriptionAlias` cmdlet, in below example run `Install-Module Az.Subscription -RequiredVersion 0.9.0`. To install version 0.9.0 of PowerShellGet, see [Get PowerShellGet Module](/powershell/gallery/powershellget/install-powershellget). Run the following [New-AzSubscriptionAlias](/powershell/module/az.subscription/new-azsubscriptionalias) command and the billing scope `"/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx"`. ```azurepowershell New-AzSubscriptionAlias -AliasName "sampleAlias" -SubscriptionName "Dev Team Subscription" -BillingScope "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx" -Workload "Production" ``` You get the subscriptionId as part of the response from the command. ```json { "id": "/providers/Microsoft.Subscription/aliases/sampleAlias", "name": "sampleAlias", "properties": { "provisioningState": "Succeeded", "subscriptionId": "aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e" }, "type": "Microsoft.Subscription/aliases" } ``` ### [Azure CLI](#tab/azure-cli) First, install the extension by running `az extension add --name account` and `az extension add --name alias`. Run the [az account alias create](/cli/azure/account/alias#az-account-alias-create) following command. ```azurecli az account alias create --name "sampleAlias" --billing-scope "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx" --display-name "Dev Team Subscription" --workload "Production" ``` You get the subscriptionId as part of the response from the command. ```json { "id": "/providers/Microsoft.Subscription/aliases/sampleAlias", "name": "sampleAlias", "properties": { "provisioningState": "Succeeded", "subscriptionId": "aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e" }, "type": "Microsoft.Subscription/aliases" } ``` --- ## Use ARM template or Bicep The previous section showed how to create a subscription with PowerShell, CLI, or REST API. If you need to automate creating subscriptions, consider using an Azure Resource Manager template (ARM template) or [Bicep file](../../azure-resource-manager/bicep/overview.md). The following template creates a subscription. For `billingScope`, provide the invoice section ID. The subscription is created in the root management group. After creating the subscription, you can move it to another management group. ```json { "$schema": "https://schema.management.azure.com/schemas/2019-08-01/managementGroupDeploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "subscriptionAliasName": { "type": "string", "metadata": { "description": "Provide a name for the alias. This name will also be the display name of the subscription." } }, "billingScope": { "type": "string", "metadata": { "description": "Provide the full resource ID of billing scope to use for subscription creation." } } }, "resources": [ { "scope": "/", "name": "[parameters('subscriptionAliasName')]", "type": "Microsoft.Subscription/aliases", "apiVersion": "2021-10-01", "properties": { "workLoad": "Production", "displayName": "[parameters('subscriptionAliasName')]", "billingScope": "[parameters('billingScope')]" } } ], "outputs": {} } ``` Or, use a Bicep file to create the subscription. ```bicep targetScope = 'managementGroup' @description('Provide a name for the alias. This name will also be the display name of the subscription.') param subscriptionAliasName string @description('Provide the full resource ID of billing scope to use for subscription creation.') param billingScope string resource subscriptionAlias 'Microsoft.Subscription/aliases@2021-10-01' = { scope: tenant() name: subscriptionAliasName properties: { workload: 'Production' displayName: subscriptionAliasName billingScope: billingScope } } ``` Deploy the template at the [management group level](../../azure-resource-manager/templates/deploy-to-management-group.md). The following examples show deploying the JSON ARM template, but you can deploy a Bicep file instead. ### [REST](#tab/rest) ```json PUT https://management.azure.com/providers/Microsoft.Management/managementGroups/mg1/providers/Microsoft.Resources/deployments/exampledeployment?api-version=2020-06-01 ``` With a request body: ```json { "location": "eastus", "properties": { "templateLink": { "uri": "http://mystorageaccount.blob.core.windows.net/templates/template.json" }, "parameters": { "subscriptionAliasName": { "value": "sampleAlias" }, "billingScope": { "value": "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx" } }, "mode": "Incremental" } } ``` ### [PowerShell](#tab/azure-powershell) ```azurepowershell New-AzManagementGroupDeployment ` -Name exampledeployment ` -Location eastus ` -ManagementGroupId mg1 ` -TemplateFile azuredeploy.json ` -subscriptionAliasName sampleAlias ` -billingScope "/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx" ``` ### [Azure CLI](#tab/azure-cli) ```azurecli az deployment mg create \ --name exampledeployment \ --location eastus \ --management-group-id mg1 \ --template-file azuredeploy.json \ --parameters subscriptionAliasName='sampleAlias' billingScope='/providers/Microsoft.Billing/billingAccounts/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx_xxxx-xx-xx/billingProfiles/AW4F-xxxx-xxx-xxx/invoiceSections/SH3V-xxxx-xxx-xxx' ``` --- To move a subscription to a new management group, use the following ARM template. ```json { "$schema": "https://schema.management.azure.com/schemas/2019-08-01/managementGroupDeploymentTemplate.json#", "contentVersion": "1.0.0.0", "parameters": { "targetMgId": { "type": "string", "metadata": { "description": "Provide the ID of the management group that you want to move the subscription to." } }, "subscriptionId": { "type": "string", "metadata": { "description": "Provide the ID of the existing subscription to move." } } }, "resources": [ { "scope": "/", "type": "Microsoft.Management/managementGroups/subscriptions", "apiVersion": "2020-05-01", "name": "[concat(parameters('targetMgId'), '/', parameters('subscriptionId'))]", "properties": { } } ], "outputs": {} } ``` Or, the following Bicep file. ```bicep targetScope = 'managementGroup' @description('Provide the ID of the management group that you want to move the subscription to.') param targetMgId string @description('Provide the ID of the existing subscription to move.') param subscriptionId string resource subToMG 'Microsoft.Management/managementGroups/subscriptions@2020-05-01' = { scope: tenant() name: '${targetMgId}/${subscriptionId}' } ``` ## Next steps * Now that you've created a subscription, you can grant that ability to other users and service principals. For more information, see [Grant access to create Azure Enterprise subscriptions (preview)](grant-access-to-create-subscription.md). * For more information about managing large numbers of subscriptions using management groups, see [Organize your resources with Azure management groups](../../governance/management-groups/overview.md). * To change the management group for a subscription, see [Move subscriptions](../../governance/management-groups/manage.md#move-management-groups-and-subscriptions). * For advanced subscription creation scenarios using REST API, see [Alias - Create](/rest/api/subscription/alias/).