Azure Costs: Day-By-Day Spending Tracking and Usability Enhancements

Today we’re very excited, to announce the release of our updated Azure Costs service. This new version gives you advanced features and functions to manage your spendings more efficient and configure daily reports & alerts more granularly.

Day-by-Day Spendings and quantity reports

Managing costs on a monthly basis is sometimes not enough and to in-accurate for business which runs within days or even hours. Azure Costs now introduces the option to track the spendings on a per day view for every single service.


This option enables you to identify costs spikes much more efficient and react on them instantly.

Define Notification Settings for Team-Members
A couple weeks ago we introduced the possibility to manage more granular notifications including alert policies. Every team administrator is now able to configure the notification settings for team members in the same powerful way.



Aggregation of SQL Backup Exports in EA spendings
Microsoft started counting every single SQL export as a single entry in the service list when the customer is using an enterprise agreement. Azure Costs aggregates this information now correctly per database.

New Filter operations
Sometimes selecting all services which have or do not have a specific tag or which follow or do not follow a specific naming convention is very helpful. The new filter operations notContains and notStartsWith allows to build these kind of filters very easily.



Manage a secondary e-mail address
Customers working with Azure Active Directory are sometimes facing the issue that the account address is not the primary contact address. Azure Costs now allows to change this by the team administrator very easily.


Interested in the new features?
Try the new features today by simply logging into your azure costs account. The features are part of any plan.

Any questions, wishes or ideas? Try our feedback portal or drop a mail to

Azure Costs: Advanced Alerting and Burn Rate Reports

Just two weeks ago we announced the release of our revised notification service for azure costs. This version provided advanced options to configure daily reports and alerts more granularly. This week we are very excited to announce more advanced features regarding our notification services which will help you to keep your cloud spendings under control.

Advanced Alert Dimensions:
Azure Costs now supports more alert dimensions to define more powerful alert policies to support your business needs optimally.


The following dimension are now available in azure costs:

  • Costs: Triggers an alert when the monthly costs become higher than defined in the limit.
  • Daily Burn Rate (absolute): This dimension triggers an alert when the daily burn rate of that day we send the mail becomes higher than defined in the limit.
  • Daily Burn Rate (relative): The relative difference of the daily burn rate triggers an alert when the change of the daily burn rate between two days becomes higher than defined in the limit. The relative difference calculates all values in percentages.
  • Daily Burn Rate Difference: The absolute difference of the daily burn rate follows the same rules as the relative difference but calculates all values in the currency the contract is managed for.
  • Daily Burn Rate Maximum: The maximum burn rate validates the burn rate of every day in the current month and triggers an alert when one value of a single day becomes higher than the limit.

If you expect more dimensions for your business needs, just let us know. We would happily extend this feature with the help of our customers. Just drop us an e-mail or open a support ticket.

Mail Based Burn Rate Report:
The best indication of costs spikes and unusual behaviour of different users and administrators in your Azure subscriptions is the daily burn rate report. A couple of month ago we introduced this report as part of our improved dashboard. Today we are announcing the integration of the burn rate report as part of our mail report.


This gives every cost- and spending manager the fastest way to get an overview and generates a call for action only when it’s really required.

Manage Alerts & Notifications for your Team-Mates:
Ensure that all of your team mates are informed on your finger tips. The team management area allows you to define notification and alert policies for every single team member, so that your co-workers will never miss an important information.


Interested in the new feature?
Try the new feature today by simply logging into your azure costs account. The feature is part of any plan.

Any questions, wishes or ideas? Try our feedback portal or drop a mail to

Azure Costs: Revised Notification Services

We’re very excited today, to announce the release of our revised notification service for azure costs. This new version gives you advanced options to configure daily reports and alerts more granularly.

User Based Notification Settings:
Many Team Administrator would like to give their team mates and co-workers the freedom to configure their daily spending report. The new User Based Notification Settings allow administrators and team members to define personal notification settings independently.


Administrators are now able to recommend corporate standards which can be used or extended from the team members.

Policy Based Alerts:
There are several conditions which trigger an alert. The new policy based alert service allows to define required business rules in azure costs to trigger spending alerts at the right time in the right context.

Airmail 2016-10-09 19-33-48.png

How to get started?
The User Based Notification Settings feature can be used right now as part of every paid plan. Policy Based Alerts are part of every professional plan or higher. Try the new features today by simply logging into your azure costs portal.

Any questions, wishes or ideas? Try our feedback portal or drop a mail to


Hey ISVs, build your own oAuth2 service :-)

Are you a SaaS Software Vendor? Do you have the idea of providing your customers an API first approach? Do you want to offer a scalable solution in the cloud? Why the h… do you need an oAuth2 server?

Many successful SaaS vendors offer an identity infrastructure based on oAuth2. Good examples are Digital Oceans, Microsoft, Amazon or Matrix42 with MyWorkspace. This article intends to explain the reasons why you should offer your own oAuth2 infrastructure when you publish a SaaS application to the world.

Five reasons to offer an oAuth2 service

  • Adapt the Micro-Service-Architecture
    SaaS applications today are different to Web applications 10 years ago. The most vendors are following the micro services architecture pattern. Let’s re-cap what Micro-Services intend to be. At the end this architecture pattern means that a vendor offers many different web services independent from each other for a specific offering. Have a look on the big ones like Microsoft Azure: They offer the Azure Resource Manager, the Storage API or the Office 365 Graph API as independent services. Compared to that public ones, Matrix42 with MyWorkspace offers services for handling identity, files, workflows and BI dashboards. Azure Costs, the service the author is also working on, is divided in separate small services for processing spending information, handling trend analytics or managing teams. All these are good examples for Micro Service and they have something together.jwt
    A session cookie based approach would not work, because this means every web service needs to take care of the session. A token based approach for authorization is a better option and the best option to provide a token is the JWT (LINK to Blog) token.

    How to get the JWT:
    Just use an oAuth2 service you provide for your micro service infrastructure. Check out different offerings in the IDaaS market or write your own.

  • State of the art Single Sign On (SSO) and federated security
    Today customers expect single sign on for their workforce. This means every SaaS application needs to support various flavours of federated security and single sign on. A better approach is to totally rely on JWT tokens and delegate the complex identity work to your oAuth2 service. The oAuth2 service should talk to the different company directories like Active Directory, Azure Active Directory or SAML2. This keeps your micro service infrastructure simple, clean and scalable again and you can drive them with just one concept and not multiple.

    How to connect to other directories:
    There are solutions in the market like Matrix42 MyWorkspace acting as identity bridge. Integrating these solutions reduces the work in your oAuth2 service to mitigate between the different identity providers.

  • Customer requires API First approach
    When talking with customers and the customer likes your solution often the second or third question is “How can I integrate …”. Translated into the language of developers this means “Do you have an API we can easily adapt?”.

    { REST }

    Because of that API first is an approach every SaaS vendor should follow. Remind the first bullet point in this article and assume your API relies totally on JWT tokens. You need to deliver a special JWT token to your customers for integration. Normally this tokens are called app-only tokens and can be used with a client credentials against an oAuth2 service. Azure Costs, as a simple example, explains how to deal with app-only tokens in the this article.

    How to issue customer integration API tokens:
    Provide a separate oAuth2 service that supports the client credentials flow incl. app-only tokens.

  • Support for mobile, web and fat clients required
    Today’s market is not focused on a special operating system or platform anymore. Even Microsoft changed their mind dramatically and now they offer with Azure one of the best cloud platforms for all kind of devices including IOT devices. Mostly every SaaS application has sooner or later the requirement to integrate different clients. The compelling event for this is normally the requirement for a mobile app but also the requirement to support a browser extension or just the integration in an embedded device. oAuth2 delivers different permission grant flows to support any kind of device and use case. This means offering an oAuth2 service gives you the freedom to support any new device because your identity infrastructure is decoupled from your micro services infrastructure.

    How to connect a mobile app to my service:
    Provide a separate oAuth2 service which support, the so called indirect flow. Normally you should not use the code flow but you need to provide some kind of device management.

  • Stay scalable for your access
    Last but not least, scalability or better the option to be ready for growing your company is a key success criteria every SaaS vendor should have an eye on. The micro-service architecture and the decoupled identity infrastructure gives you the freedom the split and combine services on different services in different clouds and in different locations.

    How to stay scalable:
    Decouple identity from resource services and enjoy the freedom to let the infrastructure grow by business needs.

Yes we can! Get your own oAuth2 service

When you think about building an oAuth2 service for your application you can start by building your own stuff. This is a great option when you need to stay under control of everything. There are also IDaaS providers on the market like Matrix42 with MyWorkspace, Auth0 or Azure Active Directory. These providers are a good starting point for your identity management project.

A hybrid approach is often the most practical. This means your engineers will provide a home grown oAuth2 service to support existing user accounts. This service should act as identity proxy to an IDaaS provider to open up the world of federated security and Single Sign On for your enterprise customers. Never waste time and budget on building an infrastructure for federated security by your own.

This article covered many technical topics on a very high level perspective. If you like it, let me know, as I think about creating a series out of it, to cover topics in more technical depth. Feel free to follow this blog to never miss an update about the upcoming series.

Streamlining API Testing with Postman


David Creedy a colleague and teammate published a great series of blog articles to explain how to handle API workflows because we are heavily involved in API related projects in our day by day business. Postman is definitely the tool of choice to supercharge all your API workflows and the following blog series will give everybody an important overview:

So I hope David will move forward with additional blog posts in this series. All what I hear the next post, we will look at how you can use different APIs that are available. I guess addressing the various options how to deal with authentication is worth an extra article.

A more powerful azure costs portal

After several months of constant improvements in the new azure costs spending portal it now becomes the standard user interface for all of your spendings.


The new portal offers a lot of new features and improvements to make your day by day work much easier. In this article we would like to highlight only the most important ones, to make your start with the new azure costs spending dashboard as easy and fast as possible:

Overall Spendings
The new overall spendings widget allows you to stay informed instantly. The widget always contains all spendings accumulated over the last 12 months.

azure costs - azure cloud cost optimization made easy 2016-08-28 15-40-35

azure costs - azure cloud cost optimization made easy 2016-08-28 15-47-31

Daily Burn Rate
An important indicator especially in cost optimization projects but also when you observe your costs on a regular basis is the daily burn rate. It’s easy to oversee what the short and mid term trend is.

Responsible Persons for Subscriptions
With this new functionality you are able to assign responsible persons to one or more subscriptions. This helps team administrators to oversee who is the single point of contact (SPOC) in case of unusual spendings.


azure costs - azure cloud cost optimization made easy 2016-08-28 15-53-42

Switch Team – Multi Team Support
For service providers and administrators who would like to oversee the spendings of several teams, the Multi Team support makes it super easy to handle spendings over different organisations in a single portal.

Smart Compare
Smart Compare allows you to conveniently compare monthly cloud costs with the costs of any previous month. azure costs highlights cost spikes & deflections, so that you can focus on the costs you are really interested in.

compare-final.png (2880×1471) 2016-08-28 16-29-04

azure costs - azure cloud cost optimization made easy 2016-08-28 16-15-23

Full Screen Mode
Every widget can be used in the full screen mode as well. This gives you enough space to work on more complex spending optimization projects without scrolling and moving around. The full screen mode is optimized for working with a huge amount of different data.

Interested in the new feature?
Try the new feature today by simply logging into your azure costs account. The feature is part of any plan.

Any questions, wishes or ideas? Try our feedback portal or drop a mail to

Integrate your applications, welcome oAuth2

The Azure Costs team is happy to announce a simplified way to integrate your applications in Azure Costs. Here is how to integrate an application in Azure Costs, that you are developing . This might for example be your BI dashboard or some other enterprise application integration platform that consumes data Azure Costs provides.

Step 1: Create an application principal

Every application which shall be integrated in Azure Costs needs to be registered as a so called application principal within a team account. The technical reason for this is that the authorisation relies on the oauth2 client credentials flow.


The application principal can be used in the same way as an interactive user. This means it’s possible to assign specific permissions to the application principal. All features of the access rights and permissions system can be used out of the box for application principals as well.

There are no limitations, every enterprise subscription allows to create as many application principals as required. In case of exposing the client secret by accident please remove or reset the application registration to prevent unauthorized access to your spending data.

Step 2: Get an access token with the client credentials grant flow

Based on the client credentials grant flows it’s possible to get the access token which needs to be used to communicate with the Azure Costs API following the “Bearer” schema in the authorisation header. The Token can be issued with the following call:

curl -X POST -d “client_id=<<clientId>>&client_secret=<<clientSecret>>&grant_type=client_credentials”

The generated access token is valid for 60 minutes and needs to be renewed after that time with the same request.

Step 3: Consume our APIs

The Azure Costs API is available via and follows the REST paradigm. If you need more information please contact us, we will support you with your project.

Interested in the new feature?
Try the new feature today by simply logging into your azure costs account. The feature is part of any Enterprise plan in our dashboards.

Any questions, wishes or ideas? Try our feedback portal or drop a mail to