Configuring Azure Data Sources

image-20251112-142732.png

Create App Registration

In this step you will create an app registration, which is the security principal that CerteroX will use to access Azure for data collection.

  1. In the Azure portal homepage, search for and open App registrations.

  2. Click +New Registration, provide a name (e.g. CerteroX) and click Register at the bottom of the page.

  3. On the Overview properties page of your application, copy the Application (client) ID and Directory (tenant) ID for use later in the Data Source configuration process.

  4. On the Manage → Certificates & secrets properties page, click on +New client secret. Enter a Description and select the expiry time, then click Add. Copy the secret value for use later in the Data Source configuration process.

The secret value is hidden shortly after creation. Make sure to copy it to a safe place before navigating away from this page.


Assign Subscription Permissions

Identify the subscriptions you wish to include in CerteroX, where the subscription billing currency matches the CerteroX Organization currency. Assign reader permissions to each subscription.

  1. Browse to the Azure Home page → Subscriptions → select the required subscription.

  2. Copy the Subscription ID for use later in the process.

  3. Click Access Control (IAM) in the left navigation bar → Role Assignments tab → click +Add → Add role assignment.

  4. Go to the Roles tab → fill in the field:

    • Selected role → Reader.

  5. Go to the Members tab → fill in the fields:

    • Assign access → User, Group or Service Principal.

    • Members → select the name of the App Registration you created.

    • Save to add the role assignment.

Repeat for all subscriptions in scope.


Create Tenant Data Source

This approach is useful if all of your subscriptions are of the same billing currency. Otherwise, follow the next section instead to Create Subscription Data Sources.

  1. Go to CerteroX for Cloud → Settings → Data Sources.

  2. Click Actions → Add.

  3. Select Azure and Tenant.

image-20250804-055511.png
  1. Give your Data Source a meaningful name.

  2. Enter the Azure tenant ID in the Directory (tenant) ID field.

  3. Add the Application (client) ID and secret.

  4. Click the Connect button.


Create Subscription Data Sources

  1. Go to CerteroX for Cloud → Settings → Data Sources.

  2. Click Actions → Add.

  3. Select Azure and Subscription.

Do not enable Use billing export

image-20250805-051233.png
  1. Give your Data Source a meaningful name, e.g. use the name of the Azure subscription.

  2. Enter the Azure tenant ID in the Directory (tenant) ID field.

  3. Add the subscription ID.

  4. Add the Application (client) ID and secret.

  5. Click the Connect button.