locked
Service providers and subscriptions RRS feed

  • Question

  • Hey All,

    As a service provider we wish to run a multi-tenant Azure Stack. We are really struggling to create a subscription model that supports capacity planning.

    Ideally, we would like the following model.

    1. Enable multi-tenancy and link a customer’s Azure with our Azure Stack (We have this running with the ASDK)
    2. Create an offer for the org with a finite quota for resources
    3. The org admin can sub-divide this offer and assign quotas to each of his users
    4. The org admin cannot assign offers beyond the quota he has been set on the delegated plan

    We have tried delegation but this doesn't seem to restrict the quota to the limit defined in the plan assigned to the org, instead it sees the delegated offer as a template and gives each tenant (user) in their org the same quota again as the org (in fact no quotas are enforced at all, but I suspect this is a bug with the ASDK!!).

    Without this in place the reality is that multi-tenancy is not really feasible as the flow becomes.

    1. Enable multi-tenancy and link a customer’s Azure with our Azure Stack
    2. Org admin gets assigned a subscription with the orgs quotas
    3. User from org authenticates against our Azure stack and no access to any resources as they are on the admins subscription and he cannot share them

    It is not feasible to manage every organisations users’ independently as a service provider as we would not be able to capacity plan at that scale.

    Could some explain how this is meant to work for service providers or tell us if we are approaching it in the wrong way?

    Thanks

    Charlie


    Friday, November 3, 2017 3:41 PM

Answers

  • It sounds like this is handled very differently for service providers using the CSP partner portal. This is not something that is currently documented in the public domain but I have seen an internal MS doc waiting for approval which should be available soon. 

    It would be great to clarify this on the Azure Stack docs as it could have saved hours :)

    Saturday, November 4, 2017 9:11 AM

All replies

  • It sounds like this is handled very differently for service providers using the CSP partner portal. This is not something that is currently documented in the public domain but I have seen an internal MS doc waiting for approval which should be available soon. 

    It would be great to clarify this on the Azure Stack docs as it could have saved hours :)

    Saturday, November 4, 2017 9:11 AM
  • We would like to discuss more on your scenario, could you send an email to ascustfeedback at microsoft dot com referencing this thread URL in the subject.   

    --------------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

    Wednesday, November 8, 2017 8:50 AM