API Setup: Microsoft Azure

To integrate with Azure, you will need to set up a new App registration, and add the app to each Subscription you want to sync data for.

In the Azure control panel, select App registrations, and then select New registration. Enter a meaningful name (this won’t be visible to anyone) and make sure only the single tenant is selected.

After clicking Register you will land on the Overview page for your new app. Client credentials will need to be added using "Add a certificate or secret".

Create a new client secret by entering a name and pressing "Add".

Once done your client secret will be displayed in the table of secrets. This will only be displayed once - ensure you store it in a secure location.

The application can now be added to any Subscription you want visible in Control Plane. Without doing so, Control Plane will be unable to sync Virtual Machine data for a particular Subscription.

When viewing a subscription you want to grant access to, select IAM in the subscription, press Add and select "Add a role assignment".

Under Job function roles, look for the Virtual Machine Contributor role. Select the role and press Next.

Select Members and type the name of the previously created app. Click it and press Select. It should appear in the list of Members on the Role assignment page.

Press "Review and Assign" twice and the role should successfully create. Repeat this process for each Subscription you want monitored.

The credentials required for the API Keys page on Control Plane can be gathered from:

• Directory (Tenant) ID: Visible on the overview for the created Azure app

• Application (Client) ID: Visible on the overview for the created Azure app

• Client Secret: The secret credential saved from earlier