Skip to content

Azure Client Authorization Configuration

The Script Market supports collecting cloud resources/cloud monitoring metrics through Azure App Registration and reporting them to TrueWatch. This document explains how to complete the collector authorization configuration.

Create an App Registration in Azure Portal

  1. In the Microsoft Entra ID page navigation bar, find App registrations and click New registration.
  2. Enter the application name as required, set Supported account types to this organizational directory only, and click Register.

register-application

Authorize the Application

  1. Find the subscription that needs to be monitored, click Access control (IAM), and select Add role assignment.
  2. Under the Role Tab, search for Monitoring Reader and select it. role-assignment
  3. Under the Members Tab, click Select members, search for the application name created above in the pop-up, select it, and click Select. role-to-member
  4. Click Review + assign to complete the authorization.
Tip

Repeat this operation for other subscriptions that need to be monitored, or you can directly authorize the application in the management group (Management groups), so that the application will automatically have permissions for all subscriptions under the management group.

Create a Secret for the Application

  1. Under App registrations, find the application created above, click Mange > Certificates & secrets.
  2. Select Client secret and click + New client secret, customize the Description, fill in Expired as needed, and click Add. create-application-secret
  3. Copy the value of the secret (Azure Client Secret Value) for later use. copy-application-secret

Script Market Collector Configuration

azure-smkt-configure

The parameters required for installing the Azure collector in the Script Market are as follows:

  • Azure Tenant ID: Tenant ID
  • Azure Client ID: Application Registration Client ID
  • Azure Client Secret Value: Client Secret Value (mentioned above, needs to be copied for later use)

Among them, Azure Tenant ID and Azure Client ID can be found on the overview page of the application: clientid-and-tenantid

Appendix: