Microsoft Azure

EA, MCA or CSP partner MCA. Customer tenants with no billing account cannot complete onboarding.

Needed to create the wiv_account app registration and its credential.

Used to assign Billing account reader or Enrollment Reader to the app.

Or Contributor plus User Access Administrator. Creates rg-wiv, the storage account and the FOCUS export.

Directly or inherited from a management group. Assigns Reader, Monitoring Reader and Cost Management Reader.

Global Administrator, subscription Owner and management-group Owner are not enough.

Cost Management + Billing → Policies. Without it the app can hold the role and still be denied cost data.

Microsoft asks you to let Wiv discover your tenant and billing scope, then provision resources.

Select the billing account, agreement-specific fields (MCA billing profile, EA enrollment account or CSP customer scope), the host subscription name and an optional metrics management group.

Host subscription, app registration, billing roles, Reservations Reader, smoke test, FOCUS export, optional metrics, federated trust, verification.

Click View Cloud Inventory to open the Azure integrations list.

From the Azure integrations page. The link runs the same provisioning engine on the customer side.

Or in the Azure portal open the billing account → Exports → WivFocusDailyExport → Run now, and confirm Parquet files appear in storage.

Deleting it breaks workflows with AADSTS700016. Store any client secret in a secret manager and rotate before expiry.