Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
You can provide resource management services to customers through Azure Lighthouse by publishing Managed Service offers to Microsoft Marketplace. You can make an offer available to all potential customers, or publish a private offer for one or more specific customers. Since you bill customers directly for costs related to these managed services, Microsoft doesn't charge any fees.
Understand Managed Service offers
Managed Service offers streamline the process of onboarding customers to Azure Lighthouse. When a customer purchases an offer in Microsoft Marketplace, they can specify which subscriptions and/or resource groups to onboard.
For each offer, you define the access that users in your organization will have to work on resources in the customer tenant. You set up this access through a manifest that specifies the Microsoft Entra users, groups, and service principals that can access customer resources, along with roles that define their level of access.
Note
Managed Service offers might not be available in Azure Government and other national clouds.
Public and private plans
Each Managed Service offer includes one or more plans. Plans can be either private or public.
If you want to limit your offer to specific customers, publish a private plan. When you do so, customers can only purchase the plan for the specific subscription IDs that you provide. For more info, see Private plans.
Note
Private plans don't support subscriptions established through a reseller of the Cloud Solution Provider (CSP) program.
Promote your services to new customers by using public plans. These plans are usually more appropriate when you only require limited access to the customer's tenant. Once you establish a relationship with a customer, if they decide to grant your organization additional access, you can enable that access either by publishing a new private plan for that customer only, or by onboarding them for further access using Azure Resource Manager templates.
If appropriate, you can include both public and private plans in the same offer.
Important
After you publish a plan as public, you can't change it to private. To control which customers can accept your offer and delegate resources, use a private plan. With a public plan, you can't restrict availability to certain customers or even to a certain number of customers, although you can choose to stop selling the plan completely.
After a customer accepts an offer, you can remove access to a delegation only if you included an Authorization with the Role Definition set to Managed Services Registration Assignment Delete Role when you published the offer. You can also reach out to the customer and ask them to remove your access.
Publish Managed Service offers
For more information about publishing a Managed Service offer, see Publish a Managed Service offer to Microsoft Marketplace.
Next steps
- Learn about Azure Lighthouse architecture and cross-tenant management experiences.
- Learn about Microsoft Marketplace.
- Publish Managed Service offers to Microsoft Marketplace.