Fetch Azure consumption billing account reservation recommendations table is empty

CloudQuery Plugins
1

I am trying to fetch azure_consumption_billing_account_reservation_recommendations, however, the table keeps coming up empty. I’ve tried with and without specifying a subscription. No errors are being returned. Any help is appreciated.

2

Are you able to pull information from other tables? What does your authentication config look like?

Have you created the recommendations so they can be synced (what outcome do you expect)? If so, can you see them in the UI on the Azure side?

Could you run the command with debug logging (verbose logging) and paste the output here for inspection?

3

I’ve tried with azure_compute_skus and that populates just fine. My config looks like this:

kind: source
spec:
  name: "azure_reservations"
  path: "cloudquery/azure"
  version: "v9.3.7"
  destinations: ["bigquery"]
  tables: ["azure_billing_periods","azure_consumption_billing_account_reservation_recommendations"]
---
kind: destination
spec:
  name: bigquery
  path: cloudquery/bigquery
  version: "v3.3.4"
  write_mode: "append"
  spec:
    project_id: ${PROJECT_ID}
    dataset_id: ${DATASET_ID}

I am authenticating with AZURE_TENANT_ID, AZURE_CLIENT_ID and AZURE_CLIENT_SECRET. I wasn’t aware that I need to create any recommendations from Azure. What I am trying is to get all reservation recommendations across the entire billing account. I’ve also tried azure_consumption_billing_profile_reservation_summaries and they also come up empty. This is the logs I am getting with debug turned on:

4

In the attached logs, I can see a 400 Bad Request response with the following error message from Azure:

{
  "error": {
    "code": "DisallowedOperation",
    "message": "The current subscription type is not permitted to perform operations on any provider namespace. Please use a different subscription."
  }
}

Can you verify whether you have the correct privileges to perform this operation? In order to sync the reservations, they first have to exit: Recommendations in Azure Advisor

5

Nope, can’t figure out which permissions are needed.

The service principal has been given the Reservation Reader role, but it’s still returning the same error.

6

There’s a similar issue posted on the Microsoft forums with a suggested fix: The current subscription type is not permitted to.

Are you able to fetch this data via the Azure CLI? Given that input, what output do you expect?