Your Azure account will have activity logs that are sent to Splunk on campus.
Initially, your account will be set up with a specific network address (10.237.x.x /28). If you decide to order a VPN, this network size may change based on the VPN setup according to Microsoft’s requirements. Some of this network space will be used for a Gateway subnet if you want to add a customer VPN.
The networks will be set up in the North Central US region, near Chicago. These initial settings will help you start using the service, and you can change or remove any of them later. Just remember that you have a specific IP range assigned, which is important if you plan to use a VPN to connect back to campus.
New accounts should be available within 1-2 business days.
Up front, there is no cost to sign up prior to consuming Azure resources. The only cost is for the customer VPN. This charge is applied once the VPN is created, whether it is being used or not.
Consolidated billing is only available to faculty and staff with subscriptions created under the Microsoft Enterprise Agreement.
You can give permissions to specific portions of your environment through granular IAM permissions. Click the Azure resource you wish to modify, select Access control (IAM), and then click Add. Select the Role and click Assign access to Azure AD user, group, or application. Enter the name of the user or group that should have access to the resource, and then click Save.
At this time this feature is not supported in Azure. We will look to add this enhancement in the future.
To submit a Microsoft support request, see the Support section.
The enterprise agreement provides legal protections as well as a Business Associate Agreement (BAA) between the University of Michigan and Microsoft. Please keep in mind that only subscriptions created under the Microsoft Enterprise Agreement and affiliated with Faculty and Staff are covered by the agreement.
Students and alumni can use a free Azure account provided by Microsoft. If using Azure for research, students and professors may be able to take advantage of research grants. However, students and alumni are not able to utilize the enterprise agreement, shortcode billing, or discounts. For more information about free Azure accounts, research grants, or Azure in Education please see the links below:
Yes, you can create multiple resource groups within a subscription.
General use of Azure for HIPAA data is not permitted at this time. U-M ITS continues to work with Michigan Medicine Corporate Compliance, the U-M data steward and compliance owner for HIPAA data, to establish processes and practices for the appropriate collection, processing, storage, and maintenance of HIPAA data in the Cloud. Please contact the Azure Support Team if you have any questions regarding using Azure for HIPAA data.