Azure - Integration & Permissions Configuration
Last updated
Last updated
The folliwng are the instructions on how to integrate with your Azure subscription/s.
Step 1: Create an Azure application
Log in to the Microsoft Azure portal and navigate to the Microsoft Entra ID section.
Click + Add > App Registration.
In the Register an application page, provide the Name of the application, select the Supported account types, specify the Redirect URI, and then, click Register. Name: Provide a unique name for identification purposes. Example: Turnitoff App. Supported account types: Select any one of the below mentioned options: Accounts in this organizational directory only (Single tenant) Redirect URI (optional): Select Web from the drop-down and enter a valid URL. Example: https://localhost:8080.
Once the application is registered in the Azure portal, you will be taken to a page with information about the application. Copy the Directory (tenant) ID and Application (client) ID and save them for later use.
Under Manage, click Certificates and secrets.
Under Client Secrets, click + New client secret. In the Add a client secret window, provide a Description, choose your preferred period in the Expires field, and click Add.
Copy the client secret value in the Value column and save it for later use. Copy and paste the value as soon as you see it since the value disappears in a short span of time.
Step 2: Providing the Necessary Permissions to the Custom App
Next, go back to Home and navigate to Subscriptions. Click the subscription that you wish to integrate with, and then click Access Control (IAM) > + Add > Add role assignment.
In the Add role assignment page, choose the Contributor role from the Privileged administrator roles tab. Then, click Next.
In the Members tab, click + Select members. In the right pane, choose the application you created earlier. Click Select.
Your application's name will now be added to the Members field. Click Next.
In the Review + assign tab, confirm if the details are correct and then click Review + assign.
Once you have completed all the steps above, you can use the above credentials to add an Azure provider