Create a Microsoft Azure service principal

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • Give Cloud Cost Management access to Microsoft Azure billing and usage data by creating a Microsoft Azure service principal.

    Before you begin

    Role required: Enterprise administrator (read only) or Partner.

    You require EA level access. For more information about the roles, see Managing Azure Enterprise Agreement roles.

    The MID Server must have access to Microsoft Cost Management.

    The following permissions are required:
    • Microsoft.Compute/virtualMachines/instanceView/read
    • Microsoft.Compute/virtualMachines/deallocate/action
    • Microsoft.Compute/virtualMachines/start/action
    • Microsoft.Compute/virtualMachines/delete
    • Microsoft.Compute/virtualMachines/write
    • Microsoft.Compute/virtualMachines/read
    • Microsoft.Compute/locations/usages/read
    • Microsoft.Advisor/recommendations/read
    • Microsoft.Advisor/generateRecommendations/read
    • Microsoft.Advisor/generateRecommendations/action
    • Microsoft.Compute/disks/delete
    • Microsoft.Compute/disks/read
    • Microsoft.CostManagement/forecast/read
    • Microsoft.Compute/locations/diskOperations/read
    • Microsoft.Insights/Metrics/Read
    • Microsoft.Compute/locations/operations/read
    • Microsoft.Sql
    • Microsoft.DBforMariaDB
    • Microsoft.DBforMySQL

    Procedure

    1. Create a Microsoft Azure service principal and open the text file that you created during the procedure.

      For instructions, see Create a Microsoft Azure service principal.

      To access resource and billing data securely on your Microsoft Azure account, the Discovery process must present appropriate Microsoft Azure account credentials. You create a special programmatic account — a service principal — to generate the required credentials.

    2. Add the Enrollment Reader role to the Microsoft Azure service principal.

      For details, see Add the Enrollment Reader role to the Microsoft Azure service principal.

    What to do next

    Create Microsoft Azure credentials for billing download