Instructions for setting up Run Command in Service Graph Connector for Azure - Product Knowledge

Instructions for setting up Run Command in Service Graph Connector for Azure SGC Azure uses managed run command to run shell or powershell commands to fetch data and enrich server information on the CMDB. This article provides information on how to do the setup on Azure and ServiceNow.

Refer the below links to check the supported virtual machines for Run Command

Linux

Windows

Architecture

Setup

Azure components required

Storage Account (Preferably new) Two containers created in the storage account Permissions to the service principal used

Steps

Create a new storage account in Azure. Refer Azure Docs for instructions on creating Azure storage account Create two containers in the above storage account one for uploading the script files downloaded from the setup page and another for results of the run command. Refer Manage containers Unzip and upload the files downloaded from the setup in the container created for storing the script files. Take a note of the URI of the files from blob properties. Note the below values of the storage account and containers created Name of the storage account where the containers are created Subscription Id where the storage account has been created Resource group of the storage account Name of the container where the sh and ps1 files are uploaded in Azure Name of the container where the results of the commands have to be stored URI of the sh file which has to be run on linux machines URI of the ps1 file which has to be run on windows machines Below permissions are required to perform run command. Add these permissions to the service principal created for SGC Azure Scope: Storage Account level Microsoft.Storage/storageAccounts/blobServices/containers/write Microsoft.Storage/storageAccounts/blobServices/containers/read Microsoft.Storage/storageAccounts/blobServices/containers/delete Microsoft.Storage/storageAccounts/listServiceSas/action Scope: Tenant level Microsoft.Compute/virtualMachines/runCommands/read Microsoft.Compute/virtualMachines/runCommands/write Microsoft.Compute/virtualMachines/runCommands/delete Navigate back to SGC Azure setup page to configure the properties Select the connection and fill the properties noted above and save

Note: Refer Link for more information on Azure Run Command and access required for run command execution on VMs