---
title: Frequently Asked Questions
slug: frequently-asked-questions
docTags:
createdAt: 2023-03-24T18:39:22.000Z
---
# Guide for Delegation of Azure Subscriptions
In order to view your Azure subscription data in SHI One, including Azure Recommendations and Azure Security & Compliance, the following process must be completed.
:::hint{type="warning"}
Note that Azure **GovCloud** is not supported in SHI One.
Note that Azure **Web Direct** subscriptions (a.k.a. Microsoft Online Subscription Program \[MOSP]) are not fully supported in SHI One.
- Web Direct subscriptions in SHI One will not display cost reporting or consumption data
- Web Direct subscriptions in SHI One will display data for Recommendations and/or Security & Compliance if you have set up those integrations
This is due to configuration parameters on Microsoft's end which prevent full access to Web Direct subscription data. Azure subscription types can sometimes be changed; reach out to a Microsoft or Azure team and ask if it is possible to change your Web Direct subscription to a different subscription type.
:::
***
## Prerequisites
- The individual performing the steps below must be an Admin in SHI One
- The individual performing the steps below must be an Owner to the subscription being delegated in Azure
- If you are a Global Admin in Azure, you can add yourself as an Owner to be able to complete the following steps
- The Microsoft.ManagedServices resource provider must be registered for the subscription(s) being onboarded
- The Azure Marketplace Application is only added once per tenant
***
## Validate the Microsoft.ManagedServices Resource Provider is Registered
The **Microsoft.ManagedServices** resource provider must be registered for the subscription(s) being onboarded.
::::WorkflowBlock
:::WorkflowBlockItem
Log in to the Azure portal with an account that has the Owner role assigned to the subscription
:::
:::WorkflowBlockItem
Navigate to [the subscriptions blade](https://portal.azure.com/#blade/Microsoft_Azure_Billing/SubscriptionsBlade) and select the subscription being onboarded
:::
:::WorkflowBlockItem
Click **Resource providers**
::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/So0lNfNiwfRn_NQUj2-SC_image.png" size="70" width="609" height="564" position="center" darkWidth="609" darkHeight="564" showCaption="false"}
:::
:::WorkflowBlockItem
Type **Microsoft.ManagedServices**
::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/YmiQ1zmSK4GxN3axViktt_image.png" size="76" width="814" height="410" position="center" darkWidth="814" darkHeight="410" showCaption="false"}
:::
:::WorkflowBlockItem
Ensure the **Microsoft.ManagedServices** resource provider is registered. If not, Register the Resource Provider
- *Please note this may take 10-15 minutes.*
:::
:::WorkflowBlockItem
Make sure every subscription has the **Microsoft.ManagedServices** registered
:::
::::
***
## Required Permissions
Each Azure Marketplace Offer will require you to accept the access permissions required for the installed Offer. Those permissions are documented below:
**SHI Azure Managed Services**
Our managed service has multiple plans available.
- **Basic**
- [Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#contributor)
- **Enterprise Support**
- [Support Request Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#support-request-contributor)
- **Professional**
- [Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#contributor)
- **Support Only**
- [Reader](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#reader)
- [Support Request Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#support-request-contributor)
- **Managed**
- [Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#contributor)
- [Resource Policy Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#resource-policy-contributor)
- [Blueprint Operator](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#blueprint-operator)
**SHI Cloud Governance Framework**
- [Reader](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#reader)
- [Support Request Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#support-request-contributor)
**SHI Azure Optimization**
Our optimization service has multiple plans available.
- **Optimization Service**
- [Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#contributor)
- [Reservation Purchaser](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#reservation-purchaser)
- **Read Only**
- [Reader](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#reader)
- [Support Request Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#support-request-contributor)
- **Read Only + Reservation Assistance**
- [Reader](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/general#reader)
- [Support Request Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#support-request-contributor)
- [Reservation Purchaser](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles/management-and-governance#reservation-purchaser)
***
## Add an SHI Azure Marketplace Offer
Log in to the Azure portal with an account that has the Owner role assigned to the subscription(s).
::::WorkflowBlock
:::WorkflowBlockItem
Browse to the appropriate Marketplace Offer based on the services you are using:
- **SHI Azure Managed Services** - Install this app if you're purchasing Azure through SHI or are engaged in professional support or managed services offerings - [https://azuremarketplace.microsoft.com/en-us/marketplace/apps/shiinternationalcorp.shi-azure-msp?tab=overview](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/shiinternationalcorp.shi-azure-msp?tab=overview)
- **SHI Cloud Governance Framework** - Install this app if you're interested in utilizing cloud governance features included in our SHI One platform - [https://azuremarketplace.microsoft.com/en-us/marketplace/apps/shiinternationalcorp.shi-vigilant-cloud?tab=Overview](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/shiinternationalcorp.shi-vigilant-cloud?tab=Overview)
- **SHI Azure Optimization** - Install this app if you're engaged in our Azure Optimization Services - [https://azuremarketplace.microsoft.com/en-us/marketplace/apps/shiinternationalcorp.shi-azure-optimization?tab=Overview](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/shiinternationalcorp.shi-azure-optimization?tab=Overview)
*Note: These links takes you an offering on Azure Marketplace. You must be logged in to your Azure portal.*
:::
:::WorkflowBlockItem
Click “Get It Now” and select the Offering that applies to the services you are using / planning to use. Follow guidance from your SHI Account Team
:::
:::WorkflowBlockItem
Select the primary subscription for deployment
:::
:::WorkflowBlockItem
Select the region to run the deployment
- The deployment must be run in a region but it is a global association to the subscription. We recommend using your most common region
:::
:::WorkflowBlockItem
Click **Review + create**
:::
:::WorkflowBlockItem
Check the confirmation box
- ***IMPORTANT - If your Create button is not highlighted**: There is a bug on this page with some browsers. If the Create button does not highlight after the box is checked, click the **Previous** button then click **Next: Review + create**. All previously entered information should be retained and the **Create** button should now be highlighted.*
:::
:::WorkflowBlockItem
Click **Create**
:::
::::
***
## Delegate Access to Additional Subscriptions for SHI
::::WorkflowBlock
:::WorkflowBlockItem
After the Azure deployment is completed, you will see a link to complete the final step of the configuration
:::
:::WorkflowBlockItem
Click "Give your partner access to your subscriptions or resource group"
:::
:::WorkflowBlockItem
For the Service Provider, select **SHI**
:::
:::WorkflowBlockItem
For the Name, select **SHI Azure Managed Services**
:::
:::WorkflowBlockItem
Click **Delegate Subscriptions**
::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/bSkDEtiwoPjWebES7zkEI_screenshot-2023-04-24-at-20100-pm.png" size="74" width="715" height="170" position="center" darkWidth="715" darkHeight="170" showCaption="false"}
:::
:::WorkflowBlockItem
Select all applicable subscriptions and click **Delegate resources**
:::
:::WorkflowBlockItem
Check the confirmation box
:::
:::WorkflowBlockItem
Click **Delegate**
:::
:::WorkflowBlockItem
You will receive a confirmation message in your Azure Notifications when the deployment is complete
- If there are any errors, please follow up with the SHI resource that provided this documentation
::Image[]{src="https://api.archbee.com/api/optimize/iNsEBjkrzpMV8hFLC23IM/8GSSnWzShXqqpXWAc-9iW_screenshot-2023-04-24-at-20122-pm.png" size="88" width="738" height="328" position="center" darkWidth="738" darkHeight="328" showCaption="false"}
:::
::::
:::hint{type="warning"}
**Note that it takes Azure up to 48 hours to grant SHI One access.**
:::
***
## Submit a Support Request in SHI One to Map the Subscriptions
::::WorkflowBlock
:::WorkflowBlockItem
In SHI One, navigate to **Support Center -> New Request -> Service Request**
:::
:::WorkflowBlockItem
For Contract, select **Azure**
:::
:::WorkflowBlockItem
For Issue Type, select **Azure - Account Management**
:::
:::WorkflowBlockItem
For Issue Sub-Type, select **Add-Manage Account/Subscription**
:::
:::WorkflowBlockItem
In the subject box, write "**Azure Tenant ID/Subscription Mapping Request**"
:::
:::WorkflowBlockItem
In the description box, include every Azure Tenant ID/Subscription
:::
:::WorkflowBlockItem
Click **Submit**
:::
::::
The Support Team will inform you when the mapping process is complete; you can check the status of your ticket at **Support Center -> Requests**.
***
## Verify the Integration in SHI One
::::WorkflowBlock
:::WorkflowBlockItem
Once the Support Team has confirmed that the mapping process is complete, navigate to **Settings -> Integrations**
:::
:::WorkflowBlockItem
Verify that the slider on the right of each Azure Integration box is orange/activated
:::
:::WorkflowBlockItem
Click on each Azure Integration box to verify that every subscription's slider is orange/activated
:::
::::
:::hint{type="warning"}
**Note that it takes Azure up to 48 hours to start sending data to SHI One.**
:::
***
# Troubleshooting
## My subscription has an hourglass icon next to it
The hourglass icon appears when Azure has not yet sent data to SHI One. It can take up to 48 hours after activating a subscription for Azure to start sending data to SHI One.
If it has been more than 48 hours since activating a subscription and the hourglass icon is still there, you can submit a support request for SHI to manually request data from Azure on your behalf. Perform the following steps:
1. In SHI One, navigate to Support Center -> New Request -> Service Request
2. For Contract, select **Azure**
3. For Cloud Account, select the affected subscription
4. For Issue Type, select **Azure - Account Management**
5. For Issue Sub-Type, select **Subscription Management**
6. In the subject box, write "**Azure Subscription Manual Sync Request**"
7. In the description box, include the name and ID of every Azure subscription that has an hourglass icon next to it and include screenshots if possible
8. Click **Submit**
The Support Team will inform you when the manual sync has been performed; you can check the status of your support request at **Support Center -> Requests**.
## My subscription has a red exclamation mark next to it
The red exclamation mark appears when there is an error with a subscription. Subscriptions in error are displayed with a message below explaining the nature of the error.
Because there are many error causes and possibilities, there is no way to list all potential methods of rectifying an error. Often the fastest method is to deactivate the affected subscription(s) and then perform this document's delegation process again. If that doesn't solve the problem, submit a support request in SHI One; make sure to include the name and ID of every subscription in error and include screenshots if possible.