Integrating an Azure Account to SpendEffix

Microsoft Azure Account Configuration

To connect your Azure account to SpendEffix and begin tracking data, follow the instructions below. This guide includes details on obtaining billing information, resource discovery, monitoring data, and setting up authentication for API access.

Required APIs

1. Billing Information is acquired via the Billing API.
2. Resource Discovery is performed via the following Discovery APIs:
   • Virtual Machines
   • Disks
   • Snapshots
   • Storage Accounts
3. Monitoring Data is sourced from Azure’s Monitoring service.

Tip: Terraform templates are available for automated account provisioning. For manual setup, follow the steps below.

---

Steps to Connect a New Azure Data Source in SpendEffix

During the initial configuration or later in the Settings section, navigate to the Azure Subscription tab under Data Source Connection to link a new Azure account. 

---

Step 1: Enter Data Source Details

1. Name
   Specify a name to assign to this data source.
2. Subscription ID
   The Subscription ID is a unique string identifying your Azure subscription.
3. Finding Your Subscription ID:
   • Log in to the Microsoft Azure Portal.
   • Search for Subscriptions to view all subscriptions associated with your Azure account.
   • The list includes a Subscription ID for each.

---

Step 2: Set Up Programmatic Access for SpendEffix

To allow SpendEffix programmatic access to Azure, provide the following:

• Tenant ID
• Application (Client) ID
• Secret

Application (Client) ID

The Application (client) ID must be created manually in Azure to enable API communication with SpendEffix.

1. Go to Azure Entra ID (formerly Active Directory) and navigate to App registrations.
2. Click + New registration, provide a name (e.g., SpendEffix), then click Register.
3. After registering, a new Application ID will be displayed.

---

Assign a Role to the Application

The registered application must have permissions to work with the selected Azure subscription.

1. From the Azure home page, go to Subscriptions and select the subscription linked to SpendEffix. 
2. In the left navigation, click Access control (IAM) and then go to the Role assignments tab.
3. Click +Add > Add role assignment:
4. Set Role to Reader.
5. Select the registered application (e.g., SpendEffix) in the third field.
6. Click Save to assign the role.

---

Directory (Tenant) ID

1. To find the Directory (Tenant) ID, go to:
2. Home → App registrations → [Your Application] → Overview
3. Locate the Directory (tenant) ID in the overview section.

---

Step 3: Generate a Client Secret

1. In App registrations, select your application (e.g., SpendEffix).
2. Navigate to Certificates & Secrets in the left navigation.
3. Add a + New client secret.
   Note: Secret values are hidden after creation. Ensure it is copied and stored securely.

---

Finalizing the Connection

Once all required fields are filled, click Connect to validate the information. After successful connection, data from Azure will be available in SpendEffix shortly.

Your Azure data source is now ready for integration with SpendEffix. For questions or assistance, please contact our Support Team at support@cloudlytics.com.