Set up access to Microsoft Azure billing and usage data

Give Cloud Cost Management access to Microsoft Azure billing and usage data by creating a Microsoft Azure service principal and securely storing your Microsoft Azure credentials in the Now Platform credentials store. You must create a service account that accepts billing data for Cloud Cost Management .

The MID Server must have access to Microsoft Cost Management .

Roles required:

Microsoft Azure : You require EA level access, at least Enterprise administrator (read only) / Partner. For more information about the roles, see Managing Azure Enterprise Agreement roles .

The following permissions are required:

Microsoft.Compute/virtualMachines/instanceView/read Microsoft.Compute/virtualMachines/deallocate/action Microsoft.Compute/virtualMachines/start/action Microsoft.Compute/virtualMachines/delete Microsoft.Compute/virtualMachines/write Microsoft.Compute/virtualMachines/read Microsoft.Compute/locations/usages/read Microsoft.Advisor/recommendations/read Microsoft.Advisor/generateRecommendations/read Microsoft.Advisor/generateRecommendations/action Microsoft.Compute/disks/delete Microsoft.Compute/disks/read Microsoft.CostManagement/forecast/read Microsoft.Compute/locations/diskOperations/read Microsoft.Insights/Metrics/Read Microsoft.Compute/locations/operations/read

Role required in Cloud Cost Management : sn_clin_core.insights_admin or admin

Important: This information applies to both the Cloud Cost Management and Cloud Insights Billing apps. All references to Cloud Cost Management also apply to Cloud Insights Billing .

Create a Microsoft Azure service principal and open the text file that you created during the procedure. For instructions, see Create a Microsoft Azure service principal . To access resource and billing data securely on your Microsoft Azure account, the Discovery process must present appropriate Microsoft Azure account credentials. You create a special programmatic account — a service principal — to generate the required credentials.

Add the Enrollment Reader role to the Microsoft Azure service principal. For details, see the documentation on assigning roles to EA service principal names on Microsoft Learn . In Cloud Cost Management , navigate to Cloud Cost Management Workspace > Operations > Administration > Credentials > . In the following steps, you securely store your Microsoft Azure credentials in the Now Platform credentials store. On the Cloud API credentials page, select Azure service principal . Select New . On the form, fill in the fields. Table 1. Azure Service Principal form Field Value Name Name of the service principal to register with the instance. For example, CloudInsights-SP. Tenant ID Unique identifier or alias for the tenant. Copy and paste the Tenant ID value from the Azure-Credentials.txt file.

Client ID Unique identifier of an application created in Active Directory. Copy and paste the Tenant ID value from the Azure-Credentials.txt file.

Authentication Method Select Client Secret . The Secret key field appears when you select Client Secret .

Note: Client Assertion isn’t supported. Secret key Azure client secret key. Copy and paste the Tenant ID value from the Azure-Credentials.txt file.

Active Option to enable the credentials for use.

Select Save .