Azure Client Authorization Configuration¶

The Script Market supports collecting cloud resources/cloud monitoring metrics through Azure App Registration and reporting them to Guance. This document explains how to complete the collector authorization configuration.

Create an App Registration in Azure Portal¶

1. In the Microsoft Entra ID page navigation bar, find App registrations and click New registration.
2. Enter the application name as required, set Supported account types to this organizational directory only, and click Register.

Authorize the Application¶

1. Find the subscription that needs to be monitored, click Access control (IAM), and select Add role assignment.
2. Under the Role Tab, search for Monitoring Reader and select it.
3. Under the Members Tab, click Select members, search for the application name created above in the pop-up, select it, and click Select.
4. Click Review + assign to complete the authorization.

Create a Secret for the Application¶

1. Under App registrations, find the application created above, click Mange > Certificates & secrets.
2. Select Client secret and click + New client secret, customize the Description, fill in Expired as needed, and click Add.
3. Copy the value of the secret (Azure Client Secret Value) for later use.

Script Market Collector Configuration¶

The parameters required for installing the Azure collector in the Script Market are as follows:

• Azure Tenant ID: Tenant ID
• Azure Client ID: Application Registration Client ID
• Azure Client Secret Value: Client Secret Value (mentioned above, needs to be copied for later use)

Among them, Azure Tenant ID and Azure Client ID can be found on the overview page of the application:

Appendix:¶

• Authenticate to Azure resources from a locally hosted Python application