Connecting an Azure account

Microsoft Azure

• Billing Information is acquired via Billing API: https://docs.microsoft.com/en-us/rest/api/consumption/usage-details/list
• Resource Discovery is performed via Discovery API:
  • https://docs.microsoft.com/en-us/rest/api/compute/virtual-machines/list-all
  • https://docs.microsoft.com/en-us/rest/api/compute/disks/list
  • https://docs.microsoft.com/en-us/rest/api/compute/snapshots/list
  • https://docs.microsoft.com/en-us/rest/api/storagerp/storage-accounts/list
• Cloud’s Monitoring service is used as the source of all Monitoring Data.

You can find Terraform templates for account provisioning here. If you prefer to set things up manually, you can also follow the instructions below.

To track a new Azure data source in DigiUsher account, kindly select the Azure Subscription tab at the Data Source Connection step during the initial configuration or later on in the Settings section of the main page.

Name

In the first field, you can specify any preferred name to be assigned to this data source.

Subscription ID

The Subscription ID is a unique string that identifies your Azure subscription. To find it:

• Kindly log in to the Microsoft Azure Portal.
• Search for Subscriptions to access a list of all subscriptions associated with your Azure account. The list will include a subscription ID for each one.

When DigiUsher is programmatically signing in to Azure, it needs to pass a tenant ID and a application ID along with a secret, which is an authentication key.

Application (Client) ID

Application (client) ID has to be generated manually in Azure to allow API communication with DigiUsher:

• Access the Azure Entra ID (formerly Active Directory) and navigate to App registrations
• Click on + New registration and provide a name, e.g. DigiUsher, and then Register at the bottom of the page
• A new Application ID will become available (as in the screenshot below)

Once you have registered an Application, it is essential to explicitly grant it permissions in a form of a Role assignment to work with the current Azure subscription.

To perform a Role assignment, from the Azure home page navigate to Subscriptions and select the one that you have provisioned to be linked to DigiUsher.

After being redirected to its dashboard, click Access control (IAM) in the left navigation bar and then go the Role assignments tab and click +Add, Add role assignment. You will be prompted to input the Role, which has to be Reader, in the first field. The second one can be left unchanged. The third field should be the name of a registered application from the previous steps, e.g. DigiUsher. Click Save to add the role assignment.

Directory (Tenant) ID

Directory (tenant) ID is a globally unique identifier (GUID) that is different from your organization name or domain. Its value is easily accessible in the overview of the application that has been added in the previous steps via App registrations.

Go to Home → App registrations → e.g. DigiUsher → Overview → Directory (tenant) ID

Secret

Secret should be created within the newly registered application:

• Go to the App registrations, click on your application, e.g. DigiUsher
• Select Certificates & Secrets in the left navigation bar and add a + New client secret

Secret’s value will be hidden shortly after its creation. Make sure to copy it in a safe place.

Once the required fields are filled out, you can click Connect to validate the information. Once you have connected to the account, the data will be pulled from the source shortly afterwards and become available in the DigiUsher.

Your Azure data source account should now be ready for integration with DigiUsher! Please contact our Support Team at support@digiusher.com if you have any questions or face any issues.