For Agents
Manage Azure Stack acquired plans on tenant subscriptions: list, retrieve, attach, and delete plan acquisitions per target subscription.
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the SubscriptionsManagementClient, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with SubscriptionsManagementClient API.
List every acquired plan attached to a target tenant subscription
Retrieve a single acquired plan by its plan acquisition id
Attach a new plan acquisition to a target subscription on Azure Stack
Remove a plan acquisition to detach a plan from a tenant subscription
GET STARTED
Use for: List all acquired plans on a tenant subscription in my Azure Stack stamp, Attach a plan to a tenant subscription on Azure Stack, Remove an acquired plan from a tenant subscription, Retrieve details of a specific plan acquisition by id
Not supported: Does not manage public Azure subscriptions, list offers, or run tenant workloads — use for Azure Stack admin acquired plans on tenant subscriptions only.
Jentic publishes the only available OpenAPI document for SubscriptionsManagementClient, keeping it validated and agent-ready.
Jentic publishes the only available OpenAPI specification for SubscriptionsManagementClient, keeping it validated and agent-ready. The Admin Subscriptions Management Client exposes the Azure Stack admin endpoint for managing the plans acquired by tenant subscriptions on a stamp. It supports listing, retrieving, creating, and deleting plan acquisitions associated with a target subscription. Use it for operator-side control of which Azure Stack plans are attached to which tenant subscriptions.
Operate exclusively against the Azure Stack admin endpoint for tenant plan governance
Patterns agents use SubscriptionsManagementClient API for, with concrete tasks.
★ Tenant Plan Governance on Azure Stack
Azure Stack operators control which plans tenants can use by attaching plan acquisitions to target subscriptions. SubscriptionsManagementClient lists the acquired plans on a target subscription, supports adding new plan acquisitions via PUT, and removing them via DELETE. This drives a governance workflow where plan changes are scripted from a CMDB rather than applied manually in the admin portal.
List acquired plans on target subscription '11111111-2222-3333-4444-555555555555' under admin subscription 'aaaa...' and attach a new plan acquisition referencing plan id 'standard-plan-2026'.
Tenant Onboarding Automation
When a new tenant is onboarded onto Azure Stack, the operator must attach the right plans to enable consumption of compute, storage, and networking. SubscriptionsManagementClient supports the AcquiredPlans_Create call (PUT under the target subscription) so the onboarding pipeline can issue the plan acquisition as part of an end-to-end script.
PUT a new acquired plan with id 'plan-acq-001' on target subscription 'tenant-1' referencing plan resource id 'resource-id-of-standard-plan'.
Tenant Offboarding Cleanup
When a tenant leaves a stamp, plan acquisitions attached to that subscription need to be removed before the subscription itself is decommissioned. SubscriptionsManagementClient supports DELETE on /acquiredPlans/{planAcquisitionId} so an offboarding workflow can sweep all plan acquisitions before tearing down the subscription record.
List all acquired plans on target subscription 'tenant-leaving' and call DELETE for each planAcquisitionId returned.
Agent-Driven Stack Operations via Jentic
An AI agent supporting an Azure Stack operations team can apply plan acquisitions through Jentic. The agent searches by intent, loads the AcquiredPlans operation schemas, and submits the requests against the admin endpoint. Jentic isolates the admin Azure AD credentials.
Use Jentic to load the SubscriptionsManagementClient AcquiredPlans_List operation, then call it for target subscription 'tenant-1' and summarise the plan acquisitions by plan name.
4 endpoints — jentic publishes the only available openapi specification for subscriptionsmanagementclient, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans
List acquired plans on a target tenant subscription
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans/{planAcquisitionId}
Get a specific acquired plan by id
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans/{planAcquisitionId}
Create or attach a plan acquisition to a target subscription
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans/{planAcquisitionId}
Delete a plan acquisition from a target subscription
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans
List acquired plans on a target tenant subscription
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans/{planAcquisitionId}
Get a specific acquired plan by id
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans/{planAcquisitionId}
Create or attach a plan acquisition to a target subscription
/subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans/{planAcquisitionId}
Delete a plan acquisition from a target subscription
Three things that make agents converge on Jentic-routed access.
Credential isolation
Azure Stack admin OAuth tokens are stored encrypted in the Jentic vault (MAXsystem). Agents calling SubscriptionsManagementClient receive scoped, short-lived bearer tokens at execution time — admin client secrets and refresh tokens never enter the agent's context.
Intent-based discovery
Agents search Jentic by intent (e.g., 'attach a plan to an azure stack subscription') and Jentic returns the matching SubscriptionsManagementClient operation with its full input schema, so the agent can call create, list, get, or delete without reading Azure Stack admin docs.
Time to first call
Direct integration with Azure Stack admin OAuth — discovery of the admin tenant, MSAL configuration, api-version handling — typically takes a full day. Through Jentic: under 30 minutes — search, load schema, execute.
Alternatives and complements available in the Jentic catalogue.
SubscriptionDefinitionsClient
Public Azure subscription definition creation rather than Azure Stack plan acquisitions
Choose for public Azure tenants; choose SubscriptionsManagementClient for Azure Stack admin plan management.
SubscriptionClient
Lists offers used as inputs to subscription creation on public Azure
Useful in mixed estates where some tenants live on public Azure offers and others on Azure Stack plans.
StorageManagementClient
Azure Stack admin storage acquisitions endpoint on the same admin base URL
Pair when an operator scripts both subscription plan management and storage acquisition reporting on a stamp.
Specific to using SubscriptionsManagementClient API through Jentic.
Why is there no official OpenAPI spec for SubscriptionsManagementClient?
Microsoft Azure publishes Swagger fragments for the Azure Stack admin Microsoft.Subscriptions.Admin provider but does not publish a consolidated, validated OpenAPI 3 spec. Jentic generates and maintains this spec so that AI agents and operators can call SubscriptionsManagementClient via structured tooling. It is validated against the live Azure Stack admin endpoint and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the SubscriptionsManagementClient use?
All endpoints require Azure Active Directory OAuth 2.0 against the Azure Stack admin tenant, declared as the azure_auth security scheme with the user_impersonation scope. Through Jentic, the admin access token is held in the vault and injected at call time so the agent never sees the raw bearer token.
Can I attach a plan to a tenant subscription on Azure Stack?
Yes. PUT /subscriptions/{subscriptionId}/providers/Microsoft.Subscriptions.Admin/subscriptions/{targetSubscriptionId}/acquiredPlans/{planAcquisitionId} attaches a plan to the target tenant subscription. The body references the plan resource id and any associated SKU.
What are the rate limits for the SubscriptionsManagementClient?
Calls go through the Azure Stack admin endpoint, which inherits the Azure Resource Manager throttling pattern (writes typically capped per subscription per hour). Throttled responses return HTTP 429 with a Retry-After header; the spec does not encode these limits, so handle them in client code.
How do I list acquired plans through Jentic?
Run pip install jentic, search Jentic for 'list acquired plans on an azure stack subscription', load the AcquiredPlans_List operation, and execute it with subscriptionId, targetSubscriptionId, and the api-version 2015-11-01. Jentic handles the Azure Stack admin token exchange.
Does this API work against public Azure?
No. The base URL is https://adminmanagement.local.azurestack.external/, which is the on-premises Azure Stack admin endpoint. For public Azure subscription provisioning, use SubscriptionDefinitionsClient and SubscriptionClient.