Set Up Azure Credentials for CloudIM

CloudIM for Azure Microsoft Azure. A cloud computing platform that provides infrastructure services, including blob storage for PCAP files and AI inference services used by . uses a Microsoft Entra ID app registration, client secret, and service principal with the Reader role on the subscriptions or resource groups you want to monitor.

After you complete these steps, add an Azure authentication profile for CloudIM, then add a CloudIM data source with the Azure provider. For the full CloudIM setup path, see Configuring CloudIM.

Create an app registration

To create an app registration:

1. Sign in to the Azure portal and open Microsoft Entra ID.

2. Under Manage, select App registrations, then click + New registration.

3. On the Register an application page:

   • Name: Enter a name for the application (for example, CloudIM).

   • Supported account types: Choose Accounts in this organizational directory only.

   • Leave the Redirect URI field empty.

4. Click Register.

Record app registration details

After the app registration is created, record the following values. You need them later for authentication:

• Application (client) ID

• Directory (tenant) ID

Create a client secret

To create a client secret:

1. In the app registration, under Manage, open Certificates & secrets.

2. Under Client secrets, click + New client secret.

3. Add a description, choose an expiration period, and finish creating the secret.

Create a service principal

The app registration needs a service principal so it can access resources in your subscriptions.

To create the service principal:

1. In the Azure CLI or Azure Cloud Shell, run the following command. Replace <APPLICATION_ID> with the Application (client) ID you recorded:

   Copy

   az ad sp create --id <APPLICATION_ID>

2. Confirm from the command output that the service principal was created successfully.

Assign the Reader role

Assign the Reader role to the app so CloudIM can query resource metrics. You can assign the role at the subscription level or at the resource group level.

To assign Reader at the subscription level:

1. In the Azure portal, open Subscriptions.

2. Select the subscription you want to track.

3. In the left menu, select Access control (IAM).

4. Click + Add, then choose Add role assignment.

5. In the Role list, select Reader.

6. Under Assign access to, select Microsoft Entra ID user, group, or service principal.

7. Click Select members, search for the app registration or service principal name, select it, then click Save.

To assign Reader at the resource group level instead:

1. In the Azure portal, open Resource groups.

2. Select the resource group you want to track.

3. In the left menu, select Access control (IAM).

4. Click + Add, then choose Add role assignment.

5. In the Role list, select Reader.

6. Under Assign access to, select Microsoft Entra ID user, group, or service principal.

7. Click Select members, search for the app registration or service principal name, select it, then click Save.

Next step

After you have the Application (client) ID, Directory (tenant) ID, and client secret, add an Azure authentication profile for CloudIM.