Login to azure devops using Azure CLI - Stack Overflow
[India] How to buy Reserved Instances (RI) on Azure without giving a CSP Partner admin access to my data? (Financial Compliance Issue)
Add login through federated identity for Azure Devops
Getting "InvalidSignatureException" when trying to run "aws ecr-get-login-password" command in Azure DevOps pipeline shell
Videos
Hi everyone,
I’m running a startup in India hosting an ERP with sensitive financial data on Azure. We are currently on a Pay-As-You-Go (PAYG) subscription using a credit card.
I need to buy Reserved Instances (RIs) to save ~50% on our bill, but the option is blocked/greyed out. I’ve learned this is due to RBI regulations in India preventing recurring auto-charges on credit cards for term commitments.
Microsoft Support told me the only way is to move my subscription to a Cloud Solution Provider (CSP) partner.
Because we handle sensitive financial data, strict compliance rules prevent us from granting Admin-on-Behalf-Of (AOBO) or "Owner/Contributor" access to a third-party reseller. We cannot have an external partner able to view or touch our production resources.
Is it possible to set up a "Zero-Trust" / "Billing-Only" relationship with a CSP in India?
Can I use GDAP (Granular Delegated Admin Privileges) to strictly limit them to billing/support only, ensuring they have zero access to my VMs, Databases, and Storage?
Has anyone successfully done this? If so, what specific roles do I need to assign/deny during the setup?
Any advice on how to navigate this "Compliance vs. Cost" deadlock would be appreciated. Thanks!