Microsoft Azure
Last updated
Was this helpful?
Last updated
Was this helpful?
When connecting your Azure data source to FinOps for Cloud, you'll need to provide the following details from Microsoft Azure:
Application ID (client ID)
Client Secret
Directory (tenant) ID
Subscription ID
Additionally, the application must be assigned the Reader role. These are the prerequisites for connecting your Azure data source to FinOps.
The following sections describe how to get these values from Azure. Once you have completed the prerequisites, see for the next steps.
The application ID (client ID) must be generated manually in Azure to allow API communication with FinOps.
To generate the application ID (client ID):
In Microsoft Entra ID (formerly Azure Active Directory), navigate to App registrations.
Select New registration.
Provide a name for the application, for example, Optscale.
Select Register.
After the application is successfully registered, the application ID is displayed. Make a note of the value. You'll need to enter it in the Application (client) ID field within FinOps.
To generate a client secret:
In the Azure portal, navigate to your newly created application. Then, select Certificates & Secrets.
Select New client secret.
Provide a description of the secret and set the expiration date.
Select Add. The secret's value is displayed in the Value column.
Copy this value immediately. You'll need to enter it in the Secret field within FinOps when connecting your Azure subscription.
The secret's value is hidden shortly after its creation. Make sure to copy the value.
Directory (tenant) ID is a globally unique identifier (GUID) that is different from your organization's name or domain. You can find this ID in the Microsoft Azure portal.
To locate your Directory ID in the Microsoft Azure portal, navigate to App registrations (for example, OptScale) > Overview > Directory (tenant) ID.
Copy the value. You'll need to enter it in the Directory (tenant) ID field within FinOps when connecting your Azure subscription.
A subscription ID is a unique string that identifies your subscription.
To find the ID in the Microsoft Azure portal, search for Subscriptions. You'll see a list of all subscriptions associated with your Azure account. The list will include a subscription ID for each subscription.
To assign the reader role to the subscription you've provisioned to be linked to FinOps:
In the Azure portal, navigate to Subscriptions.
Select the subscription. You'll be directed to its dashboard.
In the left sidebar, select Access control (IAM) and select the Role assignments tab. Then, select Add > Add role assignment.
In Add role assignment, do the following:
On the Role tab, choose Reader and select Next.
On the Members tab, make sure that User, group, or service principal is selected. Then, select Next.
The third field should contain the name of a registered application from the previous steps, for example, FinOps. Select Next.
On the Review + assign tab, review the role assignment settings, then select Review + assign to assign the role.
To do this:
Navigate to the Data sources page within FinOps. Then, select Azure.
Fill in the following fields:
Name - Enter a meaningful name for the data source.
Directory (tenant) ID - Enter the unique identifier of the tenant.
Subscription ID - Enter the ID of the Azure subscription you want to integrate. You can find this ID in Azure.
Application (client) ID - Provide your application ID (client ID).
Secret - Provide your client secret.
Select Connect.
FinOps for Cloud validates the information. When the validation process is completed, the data will be pulled from the source and displayed within FinOps.
After registering the application, you must also explicitly grant it permissions using Role Assignment to work with the current Azure subscription. See for details.
Once all of the are complete, you can connect your Azure data source to FinOps.
