An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
Yes. A Billing account contributor under an MCA can create budgets, including at subscription level.
From the Cost Management perspective, MCA billing scopes (billing account, billing profile, invoice section, and subscription via those scopes) use the Cost Management roles described in the Cost Management documentation:
- At MCA billing scopes, Owner and Contributor “can manage billing settings and access, view all costs, and manage cost configuration. For example, budgets and exports.”
- Reader and Invoice manager can also manage budgets and exports, but with more limited permissions on other billing settings.
Because a Billing account contributor at the MCA billing account scope inherits permissions down to all billing profiles and invoice sections under that account, that role has the Contributor capabilities for Cost Management at the billing account scope. Per the Cost Management role behavior table, a Contributor at an MCA billing scope can create, read, update, and delete budgets.
Therefore, assigning the Billing account contributor role on the MCA billing account allows managing budgets (create/update/delete) for costs under that billing account, including budgets scoped to individual subscriptions that roll up to that billing account.
References: