Azure On-Boarding Process (Manual)

Modified on Wed, 23 Apr at 5:11 PM

This guide provides step-by-step instructions on how to create an app registration in Azure and assign the necessary roles for monitoring and cost management. It covers creating the app, generating a client secret, and assigning the Cost Management Reader and Monitoring Reader roles to ensure proper access and functionality.

Steps to Create App Registration and Assign Roles in Azure

Log in to Azure Portal:
- Go to Azure Portal.
Create App Registration:
- Navigate to Azure Active Directory in the left-hand menu.
- Click on App registrations.
- Click New registration.
- Provide a name for the app, e.g., “AWS Cost and Monitoring App”.
- Under Supported account types, select the appropriate option based on your needs (e.g., single tenant or multi-tenant).
- Click Register.
Note Down Application (client) ID and Directory (tenant) ID:
- After registration, you will be redirected to the app’s overview page.
- Note down the Application (client) ID and Directory (tenant) ID; you will need these later.
Generate Client Secret:
- In the left-hand menu, click on Certificates & secrets.
- Click New client secret.
- Provide a description and select an expiration period.
- Click Add.
- Note down the client secret value immediately as it will be shown only once.
Assign Roles to the App:
- Cost Management Reader Role:
- Navigate to Cost Management + Billing in the left-hand menu.
- Select your subscription.
- Click on Access control (IAM).
- Click Add and then Add role assignment.
- In the Role dropdown, select Cost Management Reader.
- In the Assign access to dropdown, select Azure AD user, group, or service principal.
- Search for your app registration by name, select it, and click Save.
- Monitoring Reader Role:
- Navigate to Monitor in the left-hand menu.
- Select Settings and then Access control (IAM).
- Click Add and then Add role assignment.
- In the Role dropdown, select Monitoring Reader.
- In the Assign access to dropdown, select Azure AD user, group, or service principal.
- Search for your app registration by name, select it, and click Save.
Verify Permissions:
- Navigate back to Azure Active Directory > App registrations.
- Select your app.
Go to API permissions in the left-hand menu to ensure the roles are assigned correctly.