Link a partner ID for Azure performance - PAL or DPOR

In this article

1. Why link a Partner ID

2. Partner Admin Link (PAL) – use for the Modern Commerce platform (Azure plan) subscriptions

3. Digital Partner of Record (DPOR) – use for Enterprise Agreement (EA) subscriptions

Why link a Partner ID

Microsoft partners provide services that help customers achieve business and mission objectives using Microsoft products. When acting on behalf of the customer managing, configuring, and supporting Azure services, the partner users will need access to the customer’s environment.

You can link to a Partner ID in 2 ways

Partner Admin Link (PAL), enables Microsoft to identify and recognize partners who drive Azure customer success. Microsoft can attribute influence and Azure consumed revenue to your organization based on the account's permissions (Azure role) and scope (subscription, resource group, resource).

Note: If the subscription moved from Enterprise Agreement (EA) to Modern Commerce platform the Partner ID is not transferred.

Digital Partner of Record associates servicing partners to a Microsoft cloud subscription. It is an online capability to attach a partner to a customer’s Microsoft online subscription. DPOR benefits the customer, the partner, and Microsoft. Partners can qualify for competencies and incentives by being the DPOR and enables them to help customers optimize their usage for desired business outcomes.

Get access from your customer

Before you link your partner ID, your customer must give you access to their Azure resources by using one of the following options:

  • Guest user: Your customer can add you as a guest user and assign any Azure roles. For more information, see Add guest users from another directory.

  • Directory account: Your customer can create a user account for you in their own directory and assign any Azure role.

  • Service principal: Your customer can add an app or script from your organization in their directory and assign any Azure role. The identity of the app or script is known as a service principal.

  • Azure Lighthouse: Your customer can delegate a subscription (or resource group) so that your users can work on it from within your tenant. For more information, see Azure delegated resource management.

Link to a partner ID with Partner Admin Link (PAL)

  • Use for the Modern Commerce (Azure plan) platform subscriptions

2. Sign in to the Azure portal.

3. Enter the Microsoft partner ID. The partner ID is the Microsoft Partner Network ID for your organization. Be sure to use the Associated MPN ID shown on your partner profile.

alternate text

4. To link a partner ID for another customer, switch the directory. Under Switch directory, select your directory.

alternate text

2. Sign in to the customer's tenant with either the user account or the service principal. For more information, see Sign in with PowerShell.

Azure PowerShellCopy

Try It

 C:\> Connect-AzAccount -TenantId XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX

3. Link to the new partner ID. The partner ID is the Microsoft Partner Network ID for your organization. Be sure to use the Associated MPN ID shown on your partner profile.

Azure PowerShellCopy

Try It

C:\> new-AzManagementPartner -PartnerId 12345

Get the linked partner ID

Azure PowerShellCopy

Try It

C:\> get-AzManagementPartner

Update the linked partner ID

Azure PowerShellCopy

Try It

C:\> Update-AzManagementPartner -PartnerId 12345

Delete the linked partner ID

Azure PowerShellCopy

Try It

C:\> remove-AzManagementPartner -PartnerId 12345

Use the Azure CLI to link to a new partner ID

1. Install the Azure CLI extension.

Azure CLICopy

Try It

C:\ az extension add --name managementpartner

2. Sign in to the customer's tenant with either the user account or the service principal. For more information, see Sign in with the Azure CLI.

Azure CLICopy

Try It

C:\ az login --tenant <tenant>

3. Link to the new partner ID. The partner ID is the Microsoft Partner Network ID for your organization.

Azure CLICopy

Try It

C:\ az managementpartner create --partner-id 12345

Get the linked partner ID

Azure CLICopy

Try It

C:\ az managementpartner show

Update the linked partner ID

Azure CLICopy

Try It

C:\ az managementpartner update --partner-id 12345

Delete the linked partner ID

Azure CLICopy

Try It

C:\ az managementpartner delete --partner-id 12345

Who can link the partner ID with PAL association?

Any user from the partner organization who manages a customer's Azure resources can link the partner ID to the account.

Can a partner ID be changed after it's linked with PAL association?

Yes. A linked partner ID can be changed, added, or removed.

What if a user has an account in more than one customer tenant?

The link between the partner ID and the account is done for each customer tenant. Link the partner ID in each customer tenant.

However, if you are managing customer resources through Azure Lighthouse, you should create the link in your service provider tenant, using an account that has access to the customer resources. For more information, see Link your partner ID to track your impact on delegated resources.

Can other partners or customers edit or remove the link to the partner ID?

The link is associated at the user account level. Only you can edit or remove the link to the partner ID. The customer and other partners can't change the link to the partner ID.

Which MPN ID should I use for the PAL association if my company has multiple?

Be sure to use the Associated MPN ID shown in your partner profile.

Where can I find influenced revenue reporting for linked partner ID?

Cloud Product Performance reporting is available to partners in Partner Center at My Insights dashboard. You need to select Partner Admin Link as the partner association type.

Why can't I see my customer in the reports?

You can't see the customer in the reports due to following reasons

1. The linked user account doesn't have Azure role-based access control (Azure RBAC) on any customer Azure subscription or resource.

2. The Azure subscription where the user has Azure role-based access control (Azure RBAC) access doesn't have any usage.

Does link partner ID works with Azure Stack?

Yes, You can link your partner ID for Azure Stack.

How do I link my partner ID if my company uses  Azure Lighthouse  to access customer resources?

In order for Azure Lighthouse activities to be recognized, you'll need to associate your MPN ID with at least one user account that has access to each of your onboarded subscriptions. Note that you'll need to do this in your service provider tenant rather than in each customer tenant. For simplicity, we recommend creating a service principal account in your tenant, associating it with your MPN ID, then granting it access to every customer you onboard with an Azure built-in role that is eligible for partner earned credit. For more information, see Link your partner ID to track your impact on delegated resources.

How do I explain Partner Admin Link (PAL) to my Customer?

Partner Admin Link (PAL) enables Microsoft to identify and recognize those partners who are helping customers achieve business objectives and realize value in the cloud. Customers must first provide a partner access to their Azure resource. Once access is granted, the partner’s Microsoft Partner Network ID (MPN ID) is associated. This association helps Microsoft understand the ecosystem of IT service providers and to refine the tools and programs needed to best support our common customers.

What data does PAL collect?

The PAL association to existing credentials provides no new customer data to Microsoft. It simply provides the telemetry to Microsoft where a partner is actively involved in a customer’s Azure environment. Microsoft can attribute influence and Azure consumed revenue from customer environment to partner organization based on the account's permissions (Azure role) and scope (Management Group, Subscription, Resource Group, Resource) provided to the partner by customer.

Does this impact the security of a customer’s Azure Environment?

PAL association only adds partner’s MPN ID to the credential already provisioned and it does not alter any permissions (Azure role) or provide additional Azure service data to partner or Microsoft.

Link to a partner ID with Digital Partner of Record (DPOR)

Digital Partner of Record associates servicing partners to a Microsoft cloud subscription. It is an online capability to attach a partner to a customer’s Microsoft online subscription. DPOR benefits the customer, the partner, and Microsoft. Partners can qualify for competencies and incentives by being the DPOR and enables them to help customers optimize their usage for desired business outcomes.

  • Partners must be added as the DPOR each time a new subscription is sold, regardless of whether their customer is new or existing.

  • Microsoft policy is that only the customer can designate a DPOR for their subscriptions.

1. Go to https://portal.azure.com

2. Click Subscriptions and select the relevant subscription where you will add a partner as DPOR

3. Click on Partner Information

4. Enter the MPN ID

5. Click on ‘validate ID’.

6. The name of the partner you are adding as DPOR will appear on the UI.

7. Click ‘Save partner’.

8. You will get confirmation that the partner information has been changed.

alternate text

What is the benefit of adding a Digital Partner of Record to my subscription?

For a Customer:

  • Control of which specific partner they wish to designate for online subscription access & benefits

  • Flexibility to change or remove a partner, as desired

  • Enhanced support and engagement from partner and Microsoft

  • Optimized usage and consumption of services, as supported by their designated partners

  • Improved partner discoverability

For a Partner

  • Cloud Competency attainment

  • Incentives designation, as approved by their customer preference

  • Closer engagement with Microsoft technical, marketing and account teams

  • Improved customer discoverability

  • Microsoft visibility to their end-customer preference as selected and/or designated

Who can attach a Partner of Record?

The administrator role, also known as the “owner”, is the only role within the tenant or account that can attach a Partner of Record. Service admins, co-admins, and partners who have been designated as delegated admins do not have the ability to change the Partner of Record.

When should I add a Partner of Record to my Azure subscriptions?

We recommend assigning a Partner of Record to Azure subscriptions immediately. This capability is also enabled for Microsoft 365, Dynamics 365, Business Central, Intune and Enterprise Mobility Suite subscriptions in the admin portal for those services.

Once a DPOR has been assigned can it be changed? Is there a limit to the number of changes possible?

Yes, DPOR designation can be changed, added, removed as many times as customers wish, by following the below steps.

1. Go to https://portal.azure.com.

2. In the ‘Partner Information’ screen you will see a “delete” icon beside the partner name.

3. Click on the delete icon.

alternate text

4. You will be asked if you are sure you want to remove current partner information.

5. Click yes.

6. You will get confirmation that the partner information has been removed.

Can there be more than one DPOR assigned to a subscription at the same time?

No, there can be only one DPOR designated on any single subscription at a point in time.

What customer data will a partner be able to see as DPOR?

Partners with Digital Partner of Record association to customer Azure subscriptions can access data such as:

  • Customer ID and Customer Name

  • Customer’s Consumption/Usage Data which can include

  • Subscription ID, Subscription name

  • Key subscription attributes such as Start date and current End date

  • Aggregated metered consumption/Seat Usage data ($$ value/seat numbers)

  • DPOR association Date

  • Aggregated details of Azure Services and Seat Based Workloads that are being consumed/used

What is the difference between Partner Admin Link (PAL) and Digital Partner of Record (DPOR)?

PAL is only applicable to the modern commerce platform and relies on a partner being granted rights-based access to customer resources (owner or contributor access). PAL is automated in tracking capabilities and does not require partner input.

DPOR remains the mechanism for the Enterprise Agreement (EA), with no changes. Existing admin accounts (and associated PAL) remain unchanged when moving from EA to the Modern Commerce platform (Azure plan). If a customer moves from EA to the Modern Commerce Platform, DPOR status does not move with them.

If customer has any problems or questions about this process and the ability to assign, maintain, and change and remove a Partner of Record, please contact Support at http://azure.microsoft.com/support/options.

Contact Microsoft Partner Support

Are you a Microsoft Partner and need help from Microsoft Support? Get support from Microsoft’s own experts. They can help with partner program issues, presales assistance, issues with Microsoft products, billing questions, and more. Start here to view your Microsoft support options.

 

Contact Microsoft Partner Support

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×