Microsoft Entra ID · Remaining Built-in Roles
Billing Administrator
Can perform billing related tasks including purchases, subscription management, support tickets, and service health monitoring.
Scope: Organization-wide billing, subscription, and purchase management
Permissions
- Service Health - Manage Azure service health
- Support Tickets - Create Azure support tickets
- Billing - Full billing management
- Organization - Update organization properties
- M365 Health - Manage M365 service health
- Support Tickets - Create M365 support tickets
- Admin Center - Read admin center properties
- Purchases - Make purchases and manage subscriptions
- Payment - Update payment methods and billing information
- Invoices - View invoices and billing history
- Cost Management - Manage cost management and budgets
Common use cases
- Finance team managing Microsoft subscriptions
- Procurement staff handling license purchases
- Managing payment methods and invoices
- Subscription renewal management
- Cost management and optimization
- Budget tracking and forecasting
- Billing dispute resolution
- Invoice reconciliation
Best practices
- Assign to Finance or Procurement team members
- Separate from IT administration roles
- Implement purchase approval workflows
- Review subscription costs regularly
- Document purchase justifications
- Monitor for unexpected charges
- Coordinate with License Administrator for allocation
- Use PIM for elevated access
Security considerations
- Can make purchases affecting organizational costs
- Can modify payment information
- Can access billing and payment details
- Separate from technical admin roles
- Monitor for unauthorized purchases
- Alert on payment method changes
- Consider PIM for just-in-time access