Hero Banner

Microsoft Partner Network

Where Microsoft's CSP, MSP, SI, and ISV partners seek new opportunities and learn from each other

Reply
Microsoft

Get recognized with Partner Admin Link

Partner Admin Link (PAL) enables Microsoft to identify and recognize partners who drive Azure customer success.

Optimized for managed services where your organization is acting on behalf of the customer, PAL allows you to associate your MPN ID with the credentials that you use to deliver services within the customer's Azure tenant. Microsoft can attribute influence and Azure consumed revenue to your organization based on the account's permissions (RBAC role) and scope (subscription, resource group, resource instance).

Learn more below and check out the new webcast recording from February 7th!

 

  1. General: Overview Webcast: Get Recognized for Driving Azure Consumption (Sept 2018)
  2. PAL Specific: Get Recognized for Driving Azure Consumption on-demand link (Feb 2019)

 

  1. For management and consulting services with admin access
    1. Azure Partner Admin Link Documentation
    2. Contact: AzurePartnerAdmin@microsoft.com

 

  1. For solutions deployed in customer environments
    1. Azure Customer Usage Attribution Documentation
    2. Contact: AzureISVPilot@microsoft.com

 

  1. Existing method used for partner incentive programs
    1. Digital Partner of Record
    2. Cloud Solution Provider

 

  1. Reporting and Insights
    1. Partner Center Dashboard
    2. MyInsights Dashboard
24 REPLIES 24
Visitor 1

Re: Get recognized with Partner Admin Link

**The AzurePartnerAdmin@microsoft.com doesn't work - mails are getting bounced. **

 

Hi Team,

 

We are helping one of our customers in migrating their work loads to Azure. 

 

However, there are many Resource Groups in their Subscription. And, we have worked only on few Resource Groups. Is it possible to associated us at RG level? If not, by any chance, Microsoft is planning to add this feature in near future? Please let us know.

 

Thanks,

Praveen

Highlighted
Microsoft

Re: Get recognized with Partner Admin Link

Hi Praveen!

 

If you use PAL to associate your MPN ID with the credentials that you use in the customer's environment, the recognition and Azure revenue attribution is according to the scope of your permissions. For example, if your user account has access to a subset of RGs within the subscription, you will be recognized for the revenue generated by resources within those groups. In fact, PAL association is granular to the invidual resource level.

 

So the short answer is yes Smiley Happy

 

P.S.  We decommissioned that DL in order to scale through this community and the formal support channels.

Level 5 Contributor

Re: Get recognized with Partner Admin Link

@brian_levenson do you know if PAL is live yet and when we would expect to see something in our partner portal?

 

Will Azure consumption tracked via PAL's be shown differently or will it just show up against the comeptencies in the same way that our CSP customers do?

Level 1 Contributor

Re: Get recognized with Partner Admin Link

Thanks Brian,

Would you be able to help me with a couple of quick questions regarding Azure Partner Admin Link please?

  • Are there any news when DPOR will be replaced with PAL (I’m mostly referring to the ACR Incentives)?
  • Upon reading about PAL, it feels like it’s more focused on Managed Services partners, it’s a bit unclear how Professional Services partners will be getting recognition as our permissions can be deleted after the project is completed?

Thanks

Microsoft

Re: Get recognized with Partner Admin Link

In EA, there is no current plan to replace DPOR with PAL as the association method to reward our partners for the services they provide to customers to drive consumption (ACR).

 

With regards to the focus for PAL being Managed Services, that is somewhat true. Although, there are cases where even Professional Services partners receive admin access to customer subscriptions during the course of the engagement.  That said, we recognize a gap exists, and are workin on a Claims-based attach method for scenarios where access is not granted. 

Level 1 Contributor

Re: Get recognized with Partner Admin Link

Thank you @wrasheed . May I ask if outside of an EA PAM will replace DPOR? Or we can use the claimed based process you've mentioned for CSP clients for example? thanks

Level 3 Contributor

Re: Get recognized with Partner Admin Link

Hi @brian_levenson and @wrasheed,

I had following queries:

1)How do I confirm whether my MPN ID is linked to the account? Because once tagged we dont receive any mail or notification saying our MPN ID was attached to the account through PAL. Also we should receive an email notification if MPN ID through PAL is removed from the account (This can even be taken as a feedback to Microsoft)

2)Once PAL is done, how many days does it take for consumption to reflect on Partner Center Portal?

3)Can PAL be done by any of our team member with user account, who has access to client org or the team member should have an admin role?

4)For EA(Enterprise Agreement) where we don’t have any user accounts, would it count if the customer’s admin accounts tag us as a PAL?

5)azurepartneradmin@microsoft.com email ID doesnt work and emails sent to it bounces back

Look forward to your response

Regards,

Basha,

TheDataTeam

 

Visitor 1

Re: Get recognized with Partner Admin Link

Hi Team,

 

When I try to set the PAL via Portal or Command Line, I get the error "PartnerIdInvalid - The Partner ID is not valid", although my MPN Id is correct. What could be possible reasons for this?

 

Thank you and best regards,

Roland

Level 2 Contributor

Re: Get recognized with Partner Admin Link

Maybe you're not using a location specific partner ID? Try looking them up here:

https://partner.microsoft.com/en-us/pcv/accountsettings/locationsprofile

Level 1 Contributor

Re: Get recognized with Partner Admin Link

Hi Brian,

 

If i am an owner for the subscription, do i get the azure revenue attribution for all the resource groups and Subsets in the subscription even for new deployments as well?

 

I have a customer for which I have deployed resources for him, suppose if he gives access to my user account across the Subscription. Will I get the PAL usage for the entire subscription or only for the resources which I have deployed with my user account?

 

Level 5 Contributor

Re: Get recognized with Partner Admin Link

If you are already the DPOR then everything within that subscription is tracked. PALS is design for instances where a customer might have an EA or CSP from another provider, but you do specific work for them such as within Azure you manage the IaaS or web platforms and want to get recognition for that work.

One to watch is that PALS only counts towards Azure MSP currently and not competencies.

Level 1 Contributor

Re: Get recognized with Partner Admin Link

Hi @brian_levenson@JASA1976 @rolandkru @ggalloway @mohammed_basha 

 

If i am an owner for the subscription, do i get the azure revenue attribution for all the resource groups and Subsets in the subscription even for new deployments as well?

 

I have a customer for which I have deployed resources for him, suppose if he gives access to my user account across the Subscription. Will I get the PAL usage for the entire subscription or only for the resources which I have deployed with my user account?

 

I have deployed a VM and my colleague deployed Network Infra, can we add PAL using same credentials or it needs to be done on a individual level?

Level 5 Contributor

Re: Get recognized with Partner Admin Link

@Bharath from experience if you have a user account that has access across the subscription then you get the PAL usage for the entire subscription as its works on what the account has access to and you've said that in this case its the subcription. Anything that is subsequently deployed you also get the credit for.

 

The idea is that you should only have access to the reources (ie resource groups) that you are responsible for and require the PAL recognition for. If you are only responsible for specific resource groups then the customer has incorrectly given you additional access going against best practice, but to your advantage.

 

If you both have access to the VM and network then you only need to add on the one account or both if not to get the credit for both.

 

 

Level 1 Contributor

Re: Get recognized with Partner Admin Link

hi all-

just looking for some clarification on PAL...
a few different scenarios:

1. 
if we have a team of 5 that are doing work for a single client and all gain access to a client's environment as contributors to different Azure Subscriptions (lets just say 5 here for example), the reporting or recognition would be for 5 different sets of resources, correct? 

2.
opposite of that, same situation, if only 1 of those people assign PAL, that means we are missing out on 4 other sets/resources of PAL recognition.  Correct?

3.
we have the same 5 team members, and they all have the same access to a clients subscriptions, and only 1 person has PAL.  Are we covered for the entire environment and getting PAL recognition for everything that all 5 team members are working on?  or are we missing out on any PAL recognition in this scenario.


the going in strategy is obviously everyone put PAL on, all day long.  Smiley Happy

i just want to make sure how this shows up to our reporting and what happens in specific situations we are seeing with our teams and clients above.

thanks!

Level 5 Contributor

Re: Get recognized with Partner Admin Link

Correct on all 3 counts.

 

On point 3 you can't get the credit 5 times becuase 5 usres have access to the enviroment. Just setup one user account with the access to all the Azure resoruce groups needed by your organisation and leave that just to do PAL's is the way I'm working to keep things simple and incase one of teh team leaves you don't have to set up again.

Level 1 Contributor

Re: Get recognized with Partner Admin Link

Thanks James

when you say "leave that just to do PAL" - are you creating some sort of PAL dummy user just for this purpose?

thanks for the confirmation on the above scenarios.

Level 5 Contributor

Re: Get recognized with Partner Admin Link

Yes that has the same rights. Probelm is with a user account if the user leaves and the account gets deleted you'll lose the assoication, and also its easier to track as we know what the account is for.

GJ Level 1 Contributor
Level 1 Contributor

Re: Get recognized with Partner Admin Link

Hi,

 

When I try to get access to influenced revenue reporting for linked partner ID through Partner Center Dashboard or MyInsights Dashboard, the message 'Revenue and Performance reporting requires permission from your Primary contact.' appears.  Together with our Primary Contact I looked into permissions etc., but it turns out I have all possible permissions (Global Admin, Admin agent etc.). What specific permission or configuration is required to get access? 

Level 5 Contributor

Re: Get recognized with Partner Admin Link

Looking at permissions in our dashboard it looks like MPN partner admin is whats required.

 

My account that I use doesn't have global admin.

Visitor 1

Re: Get recognized with Partner Admin Link

Hello, I have this problem,Microsoft Tell: Get access from your customer

Before you link your partner ID, your customer must give you access to their Azure resources by using one of the following options:

  • Guest user: Your customer can add you as a guest user and assign any role-based access control (RBAC) roles. For more information, see Add guest users from another directory.

  • Directory account: Your customer can create a user account for you in their own directory and assign any RBAC role.

  • Service principal: Your customer can add an app or script from your organization in their directory and assign any RBAC role. The identity of the app or script is known as a service principal.

But with only Contributor role i able to see Partner Information to insert partner (pal) ID.

How can i add PAL if customer give me specific role for the subscription?

GJ Level 1 Contributor
Level 1 Contributor

Re: Get recognized with Partner Admin Link

Thanks for the answer. I will investigate further. It is not very wel documented....

GJ Level 1 Contributor
Level 1 Contributor

Re: Get recognized with Partner Admin Link

Does anybody know what the results are when you combine PAL with PIM (Priviledged Identity Management, feature of AD Premium P2/EMS E5 etc.)? PIM is just-in-time access (only Admin permissions when needed to do specific Admin stuff) at request. In that case you have only Admin permissions for a specific (often quite short) amount of time. PAL only counts when having Admin rights on resources. For a lot of customers it is prefered to have the managed service provider use PIM to get access. What impact is there on PAL? If a partner (by using PIM) only has Admin access for a couple of hours per week, do they only get rewarded for those hours? In that case commercial interests are not aligning with security/GDPR etc. interests. Please advice.

Microsoft

Re: Get recognized with Partner Admin Link

At least frm perspective of Partner Earned Credits in new Azure Commerce Experience, the PAL is measured daily - for a PIM scenario it would be required to measure it every minute. So from this perspective PIM does not fit in this scenario: https://docs.microsoft.com/en-us/partner-center/partner-earned-credit-explanation 

 

And I would be surprised if it works better for incentives, I guess this is only calculated on a daily basis.

GJ Level 1 Contributor
Level 1 Contributor

Re: Get recognized with Partner Admin Link

Thanks for your prompt answer.

 

So the Microsoft best practice of using PIM is not aligning very well with the commercial aspects of PAL/PEC (come to think of it, what is the difference between PAL en PEC? I guess by setting PAL, you are able to get PEC?). By using PIM, we'll never get to earning PEC, as we almost never need and thus ask for 24 h access to a customer's environment. I guess it is never wise to put commercial benefits against security best practices. When we are behaving like a good MSP we'll shoot ourselves in the foot by recommending PIM.