Azure
(Last updated - Feb 10, 2024) - This page describes how you can onboard an azure account (representing an azure subscription) in MechCloud.
Last updated
Was this helpful?
(Last updated - Feb 10, 2024) - This page describes how you can onboard an azure account (representing an azure subscription) in MechCloud.
Last updated
Was this helpful?
Note - Each of your azure subscriptions must be onboarded as a separate account in MechCloud.
Open your web browser and navigate to the .
Sign in using your Azure account credentials.
Follow below instructions to create one application (service account) per every subscription whose assets you want to discover in MechCloud.
In the Azure Portal, search for and select Microsoft Entra ID.
Under Manage, click on App registrations.
Click on New registration at the top.
Enter a name for your application/service account.
Choose Accounts in this organizational directory only under Supported account types.
Optionally, enter a Redirect URI if your application requires one. For most service accounts, this can be left blank.
Click Register.
Once your application is registered, navigate to your application's overview page.
Select Certificates & secrets from the left-hand menu.
Under Client secrets, click New client secret.
Enter a description for your secret and choose an expiration period.
Click Add.
After the secret is created, copy the Value. This is your client secret and will not be shown again.
Navigate to Subscriptions in the Azure Portal.
Select the subscription you want the service account to access.
Search for and click Access control (IAM) in left menu.
Click Add -> Add role assignment.
Choose Reader (or some other role(s) to list Vnet, Subnets and VMs in this subscription) role from the list.
Search for and select the application you registered earlier.
Click Save to assign the role.
Go back to the App registrations page and select your application.
Copy the Application (client) ID and Directory (tenant) ID from the overview page.
Select a team.
Select Azure under Select a cloud provider dropdown. This will display all the cloud accounts added for the Azure cloud provider.
Click on New Cloud Account button.
Enter a name for your account.
Vpc API Credentials
Azure Tenant Id - Enter tenant id which you obtained in the Step 5 above.
Client Id - Enter client id which you obtained in the Step 5 above.
Client Secret - Enter client secret which you obtained in the Step 3 above.
Subscription Id - Enter the id of the subscription (you can get it from the list of subscriptions in Azure portal) which you had associated the service account (created in the Step 2 above) with.
Click on Save button to add the cloud account.
Log on to and navigate to Infrastructure -> Cloud Account.