Page Comparison

Introduction

To work with Azure ARM Microsoft Partner Center in Abiquo, you'll need to add pricing credentials to your Abiquo reseller enterprise.

You can add one set of credentials from a subscription to one Abiquo enterprise only.

1. Create an Azure subscription.

   1. You may require separate credentials for some groups of regions, for example, regions in China.

   Obtain details of the subscription and create an Application with the following Azure attributes:

   Subscription ID

   1. Application (client) ID

   2. Directory (tenant) ID

   3. Application password

2. Follow this guide to obtain give consent for the Application to work with with:

   1. AccessToken

   2. RefreshToken

Obtain details of your Azure subscription

To obtain details of your Azure subscription, do the following steps.

...

Log in to the Azure portal

...

In the Home view, under Azure services, click Subscriptions. Or in the search box in the top menu bar, enter Subscriptions. Then select Subscriptions
Image Removed

...

Click on your subscription

 If the subscription does not display, check that you have selected the correct directory. Click on the directory name in the top right corner. From here you can switch directory

...

...

If you purchased the subscription directly from Azure, you can also save the Offer ID for the pricing credentials.

Create an ARM application using Azure portal

...

Abiquo uses the ARM application ID to access the ARM API and compute features.

...

To create an ARM application using the Azure Portal and obtain details of the application, do these steps.

1. Log in to the Azure portal using a user with Admin agent role

2. In the Home view, under Azure services, click Azure Active Directory. Or in the search box, enter Azure  Azure Active Directory. Select Azure Active Directory.
   Image Removed

   Image Added

   
   

3. On the left, click App registrations

4. Click New registration.
   

   Image RemovedImage Added

5. To register the application, enter a Name, select the Supported account types (Account in any organizational directory), and enter a URL. If you know the URI of the partner consent service, enter it now. Or you can enter any URL and edit the application and change this value later. Click Register.
   

   Image RemovedImage Added

6. Save the Application (client) ID and the Directory (tenant) ID, because you will need to configure them in Abiquo. Then click Certificates & secrets.
   

   Image RemovedImage Added

7. To configure the password for the application, click New client secret, which will open the Add a client secret section. Enter a Description and an Expiry duration, then click Add.
   Image Removed
   

   Image Added

   The Azure portal will display the application password ONCE ONLY. You must use this password in Abiquo, so make sure to save it, because Azure will not display it again.
   Image Removed

8. Go to the Subscriptions menu, select the subscription you want to associate the application with, and add a new permission for it with these steps.

   1. Select Access control (IAM)

   2. Click Add

   3. Click Add role assignment

   4. In the dialog, select the Contributor role, and in the Select box, enter the name of the application. Then click Save

      Image Removed

9. 
   

   Go to the Subscriptions menu again and select Resource providers

10. Search for the Microsoft.Compute provider and click Register to add it for the subscription if it is not already added

Search for the Microsoft.Network provider and click Register to add it for the subscription if it is not already addedImage Added

...

Assign permissions to the App

After you create the App, go to API permissions and add the following permissions.

For each of the permissions:

1. Click + Add

2. Click the Grant for … ... button

...

...

Permission

1. 1. Azure Service Management

...

1. 1. : user_impersonation

      Microsoft Graph

...

1. 1. : Application.ReadWrite.All

...

1. 1. , RoleManagement.ReadWrite.Directory

      Microsoft Partner

...

1. 1. : user_impersonation

      Microsoft Partner Center

...

1. 1. : user_impersonation

2. After you add the permissions, and grant them for your account, the center of the screen should look as follows.
   

   Image Modified

3. Add the application’s service principal to the Admin agents group in the CSP Partner’s Azure AD Active directory.
   
   You can search for Microsoft Partner and Microsoft Partner Center using their application IDs, which are 4990cffe-04e8-4e8b-808a-1175604b879f and fa3d9a0c-3fb0-42cc-9193-47c7ecd2edbd respectively, in the APIs my organization owns section.

Configure authorization for the use of Azure ARM credentials in the multi-cloud platform

As Azure now requires multi-factor authentication for CSP credentials, you must authorize the use of your credentials in the multi-cloud platform to obtain your access and refresh tokens for use in pricing credentials.

To create your own server to grant consent for the use of your Azure credentials, follow the instructions in the Azure documentation.

For general instructions, see https://docs.microsoft.com/en-us/partner-center/develop/partner-center-authentication#app--user-authentication and for Java instructions: https://docs.microsoft.com/en-us/partner-center/develop/partner-center-authentication#java-appuser-authentication.

...

1. Log in to the Azure portal

2. Edit your Azure application

3. In the Redirect URI, enter the URL of the partner consent service.

...

Add the Azure

...

CSP pricing and billing credentials to Abiquo

Before you add credentials, an begin:

1. Your administrator must create at least one compatible public cloud region in Azure ARM

...

2. They must allow your enterprise to access this region.

3. Some regions may require separate credentials, for example

...

1. regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region .

To connect Abiquo to your Azure ARM account, add the Azure ARM credentials obtained in the above steps to Abiquo, with the following steps.

...

Log in to Abiquo

...

Go to Users view

...

add pricing and billing credentials for CSP accounts:

1. Edit the main tenant, and go to Credentials → PublicSelect the Azure ARM provider, and enter the Pricing

2. Add the pricing credentials in the following format.

...

1. :

...

1. Code Block

...

1. csp#dir-id#app-

...

1. id#accessToken#refreshToken

   So enter the text csp#, the Directory (tenant) ID, Application (client) ID,

...

Credential: Enter the password for the Application.

Add the Azure CSP pricing and billing credentials to Abiquo

Before you add credentials, your administrator must create at least one compatible public cloud region in Azure ARM, and allow your enterprise to access this region. Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region

For CSP accounts, the main tenant should add the pricing credentials in the following format:

csp#dir-id#app-id#accessToken#refreshToken

This means you should enter the text "csp", Directory (tenant) ID, Application (client) ID, access token, and refresh token as a single string and separate each element with a '#'.

The customer tenants do not need to add pricing credentials. The platform will use the CSP credentials for the customer tenants in the hierarchy.

...

1. access token, and refresh token as a single string and separate each element with a

...

566058dd-80bc-4ccc-8d6e-e9ac00c4b4a1#8927a710-4f4d-4d11-811c-94c36e9b2c3f#fbb96b71-f92c-4f78-acf7-cd88bdee36b1

1. # (number/hash character).

2. Add billing enterprise properties in the reseller enterprise. The default values are as follows:

   1. azurecompute-arm_discount = 0

   2. azurecompute-arm_currency_code = USD

   3. billing.azure.country_code = US
      For more details, see Display Azure billing data.

3. Go to Pricing → Price factors and create price factors for the reseller enterprise. See Manage price factors.

...

Obtain credentials for CSP customers

To activate compute and billing for a CSP customer:

1. Create an app in the customer’s Active Directory

2. Add the Azure ARM compute credentials to Abiquo for the customer enterprise.

If your customers will use billing only, then you can enter the subscription and tenant details only. See Add credentials of Azure reseller customers for billing only.

When customers have billing credentials, the billing data should display on the dashboard, see Display Azure billing data .