Vantage provides an administrative portal for Managed Service Providers, or MSPs (also sometimes referred to as Resellers), to provision and centrally manage Vantage accounts on behalf of their end customers. MSPs can access this portal from their Management Account and move between each of their customer’s Managed Accounts.
GETTING STARTEDIf you are interested in this functionality, contact partnerships@vantage.sh. Your Vantage account will be set up to include a Vantage for MSPs administrative portal.If you already have separate accounts for your customers in Vantage and want to consolidate them to this model, contact support@vantage.sh.

​
Terms to Know

The following terms are used throughout this documentation.
TermDefinition
Managed AccountA customer account that is provisioned and administered by an MSP. Managed Accounts have full access to Vantage features but cannot manage their own subscription.
Management AccountThe MSP’s central administrative account used to create and oversee customers’ Managed Accounts, manage billing rules, and configure integrations.
Manager UserA user from the MSP’s organization who accesses a customer’s Managed Account. This user will inherit their role from their user in the Management Account. When logged in to a Managed Account, the Manager User sees visual indicators showing they are acting on behalf of the customer.

​
Partner Settings

The Partner Settings section in Vantage has two different sections: Managed Accounts and Billing Rules.
  • The Managed Accounts screen is the central administrative portal that MSPs can use to perform the following actions:
    • Create new customer Managed Accounts and update their name/contact email
    • Delete existing customer Managed Accounts
    • Log in to a customer’s Managed Account
    • Add integrations on behalf of a customer’s Managed Account
    • Assign billing rules to a customer’s Managed Account
  • On the Billing Rules screen, you can create custom billing adjustments, one-time charges, re-rating, and MSP-level discounts. See the Billing Rules section for additional information.

​
Create a New Customer Managed Account

A customer Managed Account functions just like a regular Vantage account; however, customers cannot view or manage subscriptions to Vantage. All Vantage features, like reports, SSO, and Slack/MS Teams integrations, are available and scoped to each customer Managed Account. To provision a new customer Managed Account:
1

Log in to your Vantage for MSPs Management Account.
2

From the top navigation, click Settings.
3

From the left navigation, under Partner Settings, select Managed Accounts.
4

The Managed Accounts administrative portal is displayed. All existing customer accounts are displayed along with the Account Name, Contact Email, and the date when the account was created. At the top, click New Managed Account.
Managed accounts screen with two existing accounts
5

Enter an Account Name and a Contact Email Address. The email address is your administrator ID for this account and therefore must match your company’s email domain. The email address cannot exist for another customer’s Managed Account; however, an alias is acceptable, like admin+customer@yourdomain.com.
Pop-up window for creating a new managed account
6

Click Create Account.

​
Role-Based Access Control

Access to Customer Managed Account is managed through Role Based Access Control (RBAC). Users in the Management Account with the Owner role can set access to Managed Accounts, based on a user’s team, following the steps below:
1

From the top navigation, select Settings.
2

Under General Settings, select Teams.
3

Select the team you want to manage access for.
4

Select the Access tab.
5

In the Managed Account Access section, you can view a list of all Managed accounts. You can adjust a team’s access accordingly based on the following options:
  • Can Access: Members of the team will be granted explicit access to the Managed Account.
  • Cannot Access: Members of the team will be explicitly denied access to this Managed Account.
  • Inherit Access: Access to the Managed Account will be determined by the Everyone Team.
If a user is a part of a Team that Cannot Access a Managed Account, they will be unable to access that Managed Account, even if they are granted Can Access permission via a different team. Users will maintain the same role that they have in the Management Account when they enter a Managed Account.

​
Access Examples

​
User Permissions

The following permissions apply based on a user’s role.
OwnerIntegration OwnerEditorViewer
View Management Account
Create resources in Management Account
Add and remove Managed Accounts
Add and remove provider integrations
View Managed Accounts (if access is granted)
Create resources in Managed Accounts (if access is granted)
Perform additional administrative capabilities in Managed Accounts, like create new users, create new workspaces, manage teams, modify billing options, manage authentication, and manage Virtual Tags (if access is granted)

​
Access a Customer’s Managed Account

From the Managed Accounts screen, you can move between each of your customers’ Managed Accounts.
1

Enter Managed Account

Next to any Managed Account’s name, click Enter Account →.
2

Access Customer Account

The Managed Account is displayed. When you enter a customer’s account, you are considered the Manager User for that account.
  • A yellow bar is displayed around the border of the screen to indicate you are logged in to the Managed Account.
  • On the bottom left, a pop-up is displayed to indicate which Managed Account you are logged in to.
Perform one of the following actions to return to your Management Account:
  • On the top right, click your user icon. Then, click Return to MSP account.
  • On the bottom left of the screen, click the X in the Logged in as pop-up.
Once you are back in the Management Account, a confirmation message is displayed at the top.
Confirmation message that indicated you returned to the MSP account

​
Single Sign-On for Managed Accounts

After a Managed Account is created, you can enable Single Sign-On (SSO) for each Managed Account. Enter the Managed Account, then follow the instructions provided in the SSO documentation to enable SSO directly within the customer’s Managed Account. Customers can also enable SSO directly from their own account. SSO is scoped to the Managed Account.

​
Add Integrations to a Managed Account

The way you add integrations to a Managed Account depends on how your MSP is set up. There are two available workflows:
  • Workflow 1 - Unconsolidated Organizations: An example MSP structure for this workflow might be where you have completely separate AWS Organizations set up for each customer. As an MSP, you have access to the payer account, and the customer has access to a member account. In this case, follow the steps below to Configure Integrations in the Managed Account.
  • Workflow 2 - Consolidated Organizations: In this setup, the MSP uses a single AWS Organization that includes multiple linked accounts under a centralized Management Account. In this case, follow the steps below to Configure Integrations in the Management Account

​
Configure Integrations in the Managed Account (Unconsolidated Organization Workflow, Most Common)

If this is the first time you are adding an integration:
1

From the Managed Accounts screen, enter a customer’s account. If this is the first time you are connecting integrations for a customer, the Connect Accounts screen is displayed.
2

Select an integration and follow the steps provided in the console.
If you are adding another integration:
1

From the top navigation, select Settings.
2

On the right navigation, click Integrations. All available integrations are displayed. Select an integration to get started.
TIPSee the Quickstart for a list of all other existing Vantage provider integrations, with links to each provider integration walkthrough.

​
Configure Integrations in the Management Account (Consolidated Organization Workflow, Less Common)

This workflow requires that you first set up an integration in your MSP account. From the Managed Accounts screen, you can add any of your connected integrations to a Managed Account. To get started, ensure that you have connected a provider integration to your Management Account. See the AWS multiple accounts documentation for information on how to connect a Management Account with multiple linked accounts. Note that provider integrations passed down to customer Managed Accounts from an MSP’s provider integrations will only be available in the first workspace of that customer. After you have connected an integration to your MSP account, follow the steps below to associate them with customer Managed Accounts.
1

From the Managed Accounts screen, select a customer’s account.
2

Select the Integrations tab. All connected provider integrations for that customer are displayed. The account status, such as Stable or Error, is also displayed.
3

To add a new connection, click Connect next to any listed provider.
4

Select any of the listed provider accounts that you want to import data from.
5

Click Save.
The Integrations screen for a managed account

​
Customer Managed Account Integration View

When an MSP manages an integration in their MSP Management Account, a customer can view the managed integration’s status. The customer cannot remove this type of integration.
1

From a customer’s account, click Settings in the top navigation.
2

On the left navigation, under MSP Settings, click Managed Integrations.
3

Any connected integrations managed by the MSP are displayed.
Customer's view of the managed accounts screen

​
Create Resources in a Managed Account

When you are logged in to a customer’s Managed Account, you can create Vantage resources, like Cost Reports, Virtual Tags, etc. For any resources, such as a Cost Report, that a Management Account user creates in a customer’s account, the Created By field displays the name Manager User.
Resource in a customer's account with the Manager User as the creator

​
Billing Rules

Custom billing rules can be created in the Management Account and optionally applied to any of your customers’ Managed Accounts. The following billing rules are available:
  • Exclusion: Exclusion of specific line items (such as EDP discounts)
  • Credits and Charges: Additional charges or credits (such as one-time management fees)
  • Adjustment: Three options are available:
    • Per Service Adjustment: Re-rating of existing services or categories (such as Amazon CloudFront data transfer charges).
    • Re-Rate to Public Price: Remove discounts and private pricing for a Managed Account (further described in the section below)
    • Remove SP/RI Discounts: Re-rate any usage for a Managed Account that is covered by Reserved Instances or Savings Plans purchased in the AWS Payer account (further described in the section below)
    • Re-Rate Tiered Discounts: Recalculate tiered pricing models for applicable services for a Managed Account (further described in the section below).
  • Custom: Custom Billing Rules allow you to craft your own billing rule using SQL based on logic you choose. This can be logic against any data within Vantage, or additionally any logic from the raw billing files from providers. At this time, only AWS is supported for applying logic to raw billing files. Further information is available in the section below.

​
Re-Rate to Public Pricing Adjustment

MSPs are often able to negotiate substantially higher Enterprise Discount Plans (EDPs) or Private Pricing Agreements (PPAs) from cloud providers based on the aggregate amount of usage across all of their customer base than what those customers would get if they were to purchase directly from a cloud provider. With the ability to re-rate to public pricing, you can revert your customers’ pricing back to list price, removing any enterprise discounts or private pricing. When you apply the Re-rating to Public Pricing Billing rule adjustment, Vantage will re-map costs from lineItem/UnblendedCost to pricing/publicOnDemandCost from the AWS Cost and Usage Report. As a result, the following will apply in Vantage:
  • When you view your parent Management Account, you will still see the price billed by AWS reflected, and the billing rule will not be applied. This enables margin analysis and understanding of where these commitments are applied.
  • When you view a customer’s Managed Account, usage of services that are included in the billing rule will be presented at list price, with no indication that any price change was made on that usage.

​
Remove SP/RI Discounts Adjustment

With discount toggling, you can decide which Reserved Instance and Savings Plan benefits your end customers receive. Use this adjustment billing rule to select whether any of your customer accounts receive discounts from commitments purchased in an AWS Payer account, or if such commitment covered usage should be reset back to list price. Any usage that is covered by a commitment purchased in an AWS Payer account will be reset to list price when you view usage in the customer’s Managed Account. This billing rule applies to any SavingsPlanCoveredUsage and DiscountedUsage usage types. Example Use Case You manage 20 customer AWS accounts and buy Savings Plans centrally. You want any of your customers to see only their own discounts. You set up and apply the Remove SP/RI Discounts adjustment to your customers’ Managed Accounts, ensuring any centrally purchased Savings Plans are excluded from customer billing.
  • After the rule is applied, you will still see the cost that is billed by AWS in your parent Management Account to enable margin comparisons for end customers. In the visual example below, Savings Plan Covered Spend is still visible at the parent account level.
Managed accounts screen with two existing accounts
  • Vantage looks up the account that purchased the Committed Spend Discount, if that account is an AWS Payer account, Vantage removes the discount on any Cost and Usage line item from any customers’ Managed Accounts where the adjustment is enabled. The below visual example shows a customer’s Managed Account. When grouped by Charge Type, only the Usage and Tax charges are shown. The Usage amount of $388.61 reflects the total list price of the usage, calculated by adding the parent account’s original Usage ($173.14) and the Savings Plan Covered Spend ($215.47) that would have otherwise reduced the cost.
Managed accounts screen with two existing accounts

​
Re-Rate Tiered Discounts

MSPs often benefit from tiered pricing models offered by cloud providers, where unit costs decrease as usage increases. Since MSPs manage multiple customers, they can aggregate usage across all accounts to achieve lower pricing tiers that individual customers would not qualify for on their own. The Re-Rate Tiered Discounts billing rule allows you to re-rate customer usage back to what it would have cost without aggregated discounts to maintain more predictable pricing structures and margins. With the Re-Rating Tiered Discounts Billing Rule adjustment, MSPs can ensure that each customer’s costs reflect only their own usage-based tiered pricing, rather than benefiting from the MSP’s aggregated tiered discounts. This allows MSPs to align customer pricing with what they would have paid if purchasing directly from the cloud provider. Additionally, MSPs can remove AWS free-tier benefits from newly created accounts. When you apply adjustment, Vantage will re-calculate pricing tiers, on a per-customer level, and effectively reconstruct the pricing model based on each customer’s individual usage. Usage of a tiered service is recalculated for each customer’s Managed Account, and tiers are reapplied based on each customer’s usage. As a result, the following will apply in Vantage:
  • When you view your parent Management Account, you will continue to see the original price billed by AWS, and the billing rule will not be applied. This enables margin analysis and helps MSPs track where discounts and commitments are applied.
  • When you view a customer’s Managed Account, usage of services included in the billing rule will be presented at list price, with no indication that any adjustments were made on that usage.
This rule applies to the following services:
Removal of tiered discounts• Amazon S3
• Amazon CloudFront
Removal of tiered discountsVarious services that fall under AWS’s free tier, such as:
• EC2 (t2.micro and t3.micro)
• RDS (750 hrs per month)
• S3 (5 GB per month)

For a full list of services, see the AWS documentation.

​
Custom Billing Rules

Custom Billing Rules in Vantage use SQL-like syntax to adjust cost data during ingestion. Apply defined pricing adjustments—such as markups, discounts, one-time fees, credits, or exclusions—using SQL statements against either raw provider cost files or processed Vantage cost data. For example, insert additional charges for premium services, update costs to reflect negotiated rates, or exclude unused resources altogether, based on your customer agreements.
NOTEOnly the AWS Cost and Usage Report (CUR) is supported for writing rules against provider cost files at this time. All CUR columns are made available for billing rules except resource_tag_% columns, which are AWS- and user-defined tag keys that are unique to each account.
Sequencing multiple SQL rules lets you control the order in which cost adjustments are applied. Rules run in list order during each data ingestion cycle and modify the effective cost shown to end customers. The logic behind the rules remains hidden, allowing for consistent pricing without exposing internal calculations.

​
SQL Rule Structure

Use the FROM or SET clause to specify which dataset your rule targets (e.g., FROM aws):
DatasetDescription
awsRaw AWS CUR data. Rules written against aws only affect how data appears in Vantage and do not modify the original CUR file.
costsVantage-processed cost data. Use when inserting or adjusting normalized costs.
Use the following SQL operations to define billing rules:
OperationDescription
UPDATEAdjust an existing cost value, such as applying a percentage discount.
DELETERemove specific line-items from being billed.
INSERTAdd new line-items, like charges or credits, into the costs dataset.
When referencing columns, you must prefix them with the dataset name (e.g., aws."lineItem/LineItemType"). Autocomplete is supported in the Vantage console. As you type, a list of available matching columns is displayed alongside your syntax. A complete list of available columns is also shown to the left of the SQL input field.
Creating a custom billing rule
The following behaviors and limitations apply when creating and managing SQL billing rules in Vantage:
  • Validation: Vantage automatically validates your SQL syntax and column names when you submit a rule. Errors are displayed in the UI.
  • Execution: Rules are applied in the order listed. If you need multiple adjustments to the same item (e.g., a discount followed by a fee), create separate rules in sequence.
  • Date Logic: Avoid using date logic in your SQL statement. Instead, use the rule’s start_date and end_date fields to define the application period. If SQL date conditions conflict with the rule’s configured dates, the rule may not apply as expected.
  • Security: SQL rules run in memory and are validated before execution. There is no risk of SQL injection or impact to your actual CUR data.
  • Limits: Each workspace can define up to 20 billing rules. If you need more, contact support@vantage.sh.

​
Example: Apply a Discount

The following example applies a 9.5% discount to all cost line items, except those related to credits, fees, AWS support, or marketplace purchases: 
UPDATE aws
SET "lineItem/UnblendedCost" = aws."lineItem/UnblendedCost" * '0.095'
WHERE
aws."lineItem/ProductCode" != 'AwsPremiumSupport'
AND aws."lineItem/LineItemType" != 'Credit'
AND aws."lineItem/LineItemType" != 'Fee'
AND aws."bill/BillingEntity" != 'AWS Marketplace'
TIPYou can find more examples of SQL billing rules in the FinOps as Code repository.

​
Create Billing Rules

NOTEBilling rules are evaluated in priority order based on the order they are listed on the Billing Rules page.
To add new billing rules:
1

Log in to your Vantage for MSPs Management Account.
2

From the top navigation, click Settings.
3

From the left navigation, under Partner Settings, select Billing Rules.
4

All your existing billing rules are displayed. Click New Billing Rule, then select Adjustment, Charge, Credit, or Exclusion. Click the tabs below for instructions on each billing rule type.
With adjustments, you can select between three different re-rating options.
1

Enter a rule Title, such as CloudFront Re-rating.
2

Optionally, enter a Start Date and/or End Date to define when the billing rule should be active.
  • If only a start date is set, the rule applies from that date onward, indefinitely.
  • If only an end date is set, the rule applies from the beginning of your data up to that date.
3

Select an Adjustment Type:
  • If you select Per-Service Adjustment:
    • Select a Service, such as Amazon CloudFront.
    • Optionally, enter a Category, such as Data Transfer.
    Tip: To see Category names, navigate to the Cost Reports screen and create a new Cost Report. Above the graph, expand the Group By menu and select Category. A list of existing category options is displayed.
    • Enter a percentage value that will be shown to the customer. For example, if you enter 75.0, then in the example above, 75% of Amazon CloudFront Data Transfer costs will be shown to the customer.
    • Click Save.
  • If you select Remove RI/SP Discounts:
    • No other fields are displayed. Click Save.
  • If you select Re-Rate to Public Price:
    • No other fields are displayed. Click Save.
  • If you select Re-Rate Tiered Discounts:
    • Click the toggle to select whether to include Free tier costs when re-rating.
    • Click Save.
NOTEYou can also select whether to automatically apply the new billing rule to all existing and new Managed Accounts from this modal.

​
Assign Billing Rules to Managed Account

You can select which rules you want added to Managed Accounts.
1

From the Managed Accounts screen, select any of your listed Managed Accounts.
2

Select the Billings Rules tab.
3

Click Assign a Billing Rule.
4

Select one or more billing rules and click Save. The billing rule is applied to the customer’s costs. A customer will only be able to see credits and charges. Exclusions and adjustments are not shown in the customer view.
After billing rules are applied to Managed Account, re-processing of the data begins immediately. The time required depends on the scale of the data in the account, but it typically completes within 30 minutes after applying the rule.
To delete a billing rule from being used on a Managed Account, from the Billings Rules tab, click the trashcan icon next to the rule’s name.

​
Remove a Managed Account

You can either unlink or delete a customer’s account. MSP customers cannot delete accounts.
NOTEIf you are a customer with a Managed Account and want your account deleted, contact your MSP.
  • If you want to only unlink an account, but not delete the account, contact support@vantage.sh. The account will still exist in Vantage.
  • When an account is completely deleted, the account is unlinked from the MSP and also completely deleted from Vantage. To delete a customer’s Managed Account, click the trash can icon next to the account name on the Managed Accounts screen.
WARNINGDeleting a customer’s account is a permanent action and will remove any connected customer integrations.

​
Customers: Getting Started with Vantage

As you onboard your customers to Vantage, the following resources are available to help customers get started with Vantage features.

Quickstart

Information on how to get started with each Vantage provider integration and the cost reporting data that’s collected

Vantage University

A suite of training videos and guides to introduce basic Vantage concepts and features

Cost Reports

Create your first Cost Report on Vantage