Account connection guide
Azure billing access guide
Create a service principal that can authenticate with Azure AD and query Cost Management at the correct scope.
Minimum access
Cost Management Reader
Before you connect
Create a dedicated app registration or service principal for Rateplane.
Use the subscription scope by default unless billing data lives at another supported Cost Management scope.
Grant the service principal Cost Management Reader or equivalent read access.
Capture the tenant ID, client ID, client secret, and subscription ID.
Setup steps
- 1.Register an application in Microsoft Entra ID.
- 2.Create a client secret for that application.
- 3.Assign Cost Management Reader access on the subscription or billing scope.
- 4.Copy the tenant ID, client ID, client secret, and subscription ID into Rateplane.
- 5.Only fill billing scope override if your costs must be queried outside the subscription path.
- 6.Run the in-app connection test before saving the account.
How to verify it worked
The connection test should report that the Cost Management scope can be queried.
A successful sync should populate spend records and clear any previous sync error.
If the test fails, verify the scope path and role assignment propagation.