Problem with permissions when using New-AzSubscriptionAlias in Azure CLI

Question

I want to automate the process of creating a new Azure subscription and add all the necessary custom roles and resources required for a new environment. The problem I'm stuck on is the first step of creating the new subscription.

I created an app and gave it the role Azure subscription creator at the invoice profile level, but when I run my script, the line with New-AzSubscriptionAlias keeps throwing an error:

"You do not have sufficient permissions on the specified invoice section to create an Azure subscription. Refer(http://aka.ms/mca-section-invoice) to set the right permissions and try again"

For some reason, this issue also occurs when I run the code directly in the CLI with my user, who has the same assigned role, even though I'm able to manually create a subscription through the portal.

The line that I try to run is

New-AzSubscriptionAlias -AliasName "test" -SubscriptionName "test" 
   -BillingScope "/providers/Microsoft.Billing/billingAccounts/****/billingProfiles/****/invoiceSections/****" 
   -Workload "DevTest"

Is there some difference in the permissions you do in the portal compared to the CLI?

HappySpartan · Accepted Answer · 2025-06-24 15:25:34Z

0

As said in the documentation of the New-AzSubscriptionAlias Function:

Billing scope of the subscription.
For CustomerLed and FieldLed: /billingAccounts/{billingAccountName}/billingProfiles/{billingProfileName}/invoiceSections/{invoiceSectionName}
For PartnerLed: /billingAccounts/{billingAccountName}/customers/{customerName}
For Legacy EA: /billingAccounts/{billingAccountName}/enrollmentAccounts/{enrollmentAccountName}

You can forget about the last two cases as you probably not doing it as a Partner.
Your current property of -BillingScope is not correct, it is currently trying to use a Azure Resource ID (with providers).

Link: https://learn.microsoft.com/en-us/powershell/module/az.subscription/new-azsubscriptionalias?view=azps-14.1.0

answered Jun 24 at 15:25

HappySpartan

1761 silver badge8 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Problem with permissions when using New-AzSubscriptionAlias in Azure CLI

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related