Introduction

Ingram Micro, as Eden Akers’ authorized distributor in the Cloud Marketplace, requires delegation permissions in Azure under the “on behalf of” model. These are essential to:

  1. Procure and provision licenses efficiently – Acting under vendor authorization, Ingram Micro can initiate Microsoft cloud service subscriptions on behalf of end customers, streamlining the purchasing process through Eden Akers’ platform.

  2. Integrate customer tenants into Eden Akers’ marketplace ecosystem – Deeper Azure permissions enable secure onboarding of customer tenants, tenant creation, user access setup, and the assignment of entitlement-based roles.

  3. Manage and maintain services post‑deployment – With delegated privileges, The Cloud Marketplace can provision resources, manage subscriptions, monitor billing statuses, and troubleshoot issues directly in the customer’s tenant—ensuring responsive service delivery and reducing delays.

  4. Ensure compliance and governance under central control – Operating through Eden Akers’ delegated permissions allows all access to flow through formally audited channels, preserving audit trails and compliance with Microsoft’s partner requirements.


In summary
Eden Akers entrusts Ingram Micro with these Azure permissions to act as a seamless extension of its own Cloud Marketplace operations—covering customer onboarding, license provisioning, and subscription lifecycle management—while maintaining governance, transparency, and alignment with Microsoft’s partner ecosystem.


Steps

  1. Log in on the Azure portal with an end-customer admin account. (portal.azure.com)
  2. Search for subscription in the search bar (Note: if your Azure portal has different language settings use the respective word for Subscription in that language)
  3. Copy the subscription ID
  4. Activate PowerShell

  5. press ‘’Create Storage’’. If this fails continue with Step 6 otherwise go to Step 7.
  6. (Only if the creation fails): Press ‘’Show advanced settings’’ and manually create a storage account. Note: the storage accounts need to have a unique name.


  7. Copy the subscription ID and use it to replace ‘’<subscriptionId>’’ 


In NotePad or another Text Editor create the following command:


New-AZRoleAssignment -ObjectId '34c4dd11-78c0-41e5-8370-c6dbf16bc3e9' -ObjectType ‘ForeignGroup’ -RoleDefinitionName "'Support Request Contributor” -Scope /subscriptions/<subscriptionId>


e.g. 


New-AZRoleAssignment -ObjectId '34c4dd11-78c0-41e5-8370-c6dbf16bc3e9' -ObjectType ‘ForeignGroup’ -RoleDefinitionName 'Owner' -Scope /subscriptions/67c7a843-496c-4fc2-SSSSSSSSSS



  • Copy the complete command with the subscriptionID and run it in powershell (NOTE: Powershell does not recognize CTRL+C / CTRL+V. You have to use [Shift] + [Insert].

  • Press ‘’Enter’’.  And it should look like the following



Once this is completed Ingram Micro has been successfully added to the subscription.