Add a Microsoft Azure subscription

This topic describes how to onboard a Microsoft Azure workspace to CEM.

Before you begin

Make sure that you have:

  • A Microsoft Azure directory

  • The following permissions on the directory:

    • You are the global administrator

    • When onboarding an entire directory, you must be the owner of the root management group in the directory

    • When onboarding specific subscriptions, you must be the subscription owner or administrator

Connect to Microsoft Azure

The following flow chart describes the different options to connect to Microsoft Azure. Click an option to learn more.

Onboard a new directory

Discover resource hierarchies for a new directory. After the discovery completes, you can add Azure subscriptions to CEM.

Step 1: Specify the directory details

  1. Sign in to the Microsoft Azure Management Console.

  2. In CEM, go to Setup > Platform management > Azure.

  3. Provide the following directory details:

Item

Description

Directory (tenant) ID

ID assigned to the directory.

Directory name (optional)

Optional name that describes the directory.

Step 2: Define the scope

In CEM, select one of the following options:

Option

Details

Connect the entire directory

This option onboards the directory and all of its child groups and subscriptions.

Connect specific management groups

Enter the IDs of the groups you want to onboard, pressing Enter after each ID.

Connect specific subscriptions

Enter the subscription IDs of the subscriptions you want to onboard, pressing Enter after each ID.

Step 3: Connect the required Microsoft Azure subscriptions

Do the following in CEM to connect the subscriptions you want scanned.

  1. Go to the Setup > Platform management > Azure page.

  2. Select the subscriptions to connect.

For details, see View and manage workspace connections.

Add a new subscription to an existing directory

You can add new or existing subscriptions to a discovered directory at any time after onboarding the parent directory.

Step 1: Specify the directory details

  1. In CEM, go to the Setup > Platform management > Azure page.

  2. Select the scope and provide the requested details:

    Option

    Details

    Connect specific management groups

    Enter the IDs of the groups you want to onboard, pressing Enter after each ID.

    Connect specific subscriptions

    Enter the subscription IDs of the subscriptions you want to onboard, pressing Enter after each ID.