Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

...

  1. Log in to the Azure portal

  2. In the Home view, under Azure services, click Subscriptions. Or in the search box in the top menu bar, enter Subscriptions. Then select Subscriptions
    Image RemovedImage Added

  3. Click on your subscription

    (info) If the subscription does not display, check that you have selected the correct directory. Click on the directory name in the top right corner. From here you can switch directory

    Image RemovedImage Added
  4. Save the Subscription ID to enter in the Abiquo credentials.

  5. If you purchased the subscription directly from Azure, you can also save the Offer ID for the pricing credentials.

...

  1. Log in to the Azure portal

  2. In the Home view, under Azure services, click Azure Active Directory. Or in the search box, enter Azure Active Directory. Select Azure Active Directory
    Image RemovedImage Added

  3. On the left, click App registrations

  4. Click New registration

    Image RemovedImage Added
  5. To register the application, enter a Name, select the Supported account types, and enter a URL. If you know the URI of the partner consent service, enter it now. Or you can enter any URL and edit the application and change this value later. Click Register

    Image RemovedImage Added
  6. Save the Application (client) ID and the Directory (tenant) ID, because you will need to configure them in Abiquo. Then click Certificates & secrets

    Image RemovedImage Added
  7. To configure the password for the application, click New client secret, which will open the Add a client secret section. Enter a Description and an Expiry duration, then click Add
    Image RemovedImage Added

    The Azure portal will display the application password ONCE ONLY. You must use this password in Abiquo, so make sure to save it, because Azure will not display it again.
    Image RemovedImage Added

  8. Go to the Subscriptions menu, select the subscription you want to associate the application with, and add a new permission for it with these steps.

    1. Select Access control (IAM)

    2. Click Add

    3. Click Add role assignment

    4. In the dialog, select the Contributor role, and in the Select box, enter the name of the application. Then click Save

      Image RemovedImage Added
  9. Go to the Subscriptions menu again and select Resource providers

    1. Search for the Microsoft.Compute provider and click Register to add it for the subscription if it is not already added

    2. Search for the Microsoft.Network provider and click Register to add it for the subscription if it is not already added

Assign permissions to the App

After you create the App, go to API permissions and add the following permissions.

For each of the permissions:

  1. Click + Add

  2. Click the (tick) Grant for … button

Category

Permission

Azure Service Management

user_impersonation

Microsoft Graph

Application.ReadWrite.All

RoleManagement.ReadWrite.Directory

Microsoft Partner

user_impersonation

Microsoft Parter Center

user_impersonation

After you add the permissions, and grant them for your account, the center of the screen should look as follows.

...

Configure authorization for the use of Azure ARM credentials in the multi-cloud platform

...

To create your own server to grant consent for the use of your Azure credentials, follow the instructions in the Azure documentation. For general instructions, see https://docs.microsoft.com/en-us/partner-center/develop/partner-center-authentication#app--user-authentication and for Java instructions: https://docs.microsoft.com/en-us/partner-center/develop/partner-center-authentication#java-appuser-authentication.

...