Due to a limitation with MCA billing accounts that affect Service Principals accessing cost data, we require all MCA Customers to use a B2B User with Reader Role at BillingAccount/BillingProfile scope. This limitation is a Microsoft-acknowledged issue and is currently being fixed by Microsoft.

Before proceeding, please confirm that you have already created the CloudMonitor Synapse AD B2B user. If not, please visit the following webpage [How to create the CloudMonitor Synapse AD B2B User](https://helpdesk.cloudmonitor.ai/support/solutions/articles/51000373084-how-to-create-the-cloudmonitor-synapse-b2b-user) for instructions on how to do so.

To demonstrate this limitation, you can attempt to use your Service Principal and follow instructions outlined in the following webpage [Exports - Create Or Update - REST API](https://learn.microsoft.com/en-us/rest/api/cost-management/exports/create-or-update?view=rest-cost-management-2023-08-01&tabs=HTTP#code-try-0).

Open the [Azure Portal](https://portal.azure.com/#home).

Open the "Cost Management + Billing" section in the Azure Portal. Note: This is not at the Subscription level and you will need to be a Global Azure Admin to do this.

Select the Billing scope you want to grant a Billing account reader role to.

Click "Access control (IAM)" and click " + Add"

Choose "Billing account reader". This does not have any permissions to write any data.

Select the Service Principal you created for CloudMonitor and click on Add.

Now you have provided the billing account reader access to your service principal. Please move to the next step [Configuring Storage for CloudMonitor to schedule Exports : CloudMonitor Helpdesk](https://helpdesk.cloudmonitor.ai/support/solutions/articles/51000362293-configuring-storage-for-cloudmonitor-to-schedule-exports)

How to grant Billing Account Reader Access for MCA Billing Accounts