| Table of Contents |
|---|
...
Log in to the Azure portal using a user with Admin agent role
In the Home view, under Azure services, click Azure Active Directory. Or in the search box, enter Azure
Azure Active Directory. Select Azure Active Directory.
On the left, click App registrations
Click New registration.
To register the application, enter a Name, select the Supported account types (Account in any organizational directory), and enter a URL. If you know the URI of the partner consent service, enter it now. Or you can enter any URL and edit the application and change this value later. Click Register.
Save the Application (client) ID and the Directory (tenant) ID, because you will need to configure them in Abiquo. Then click Certificates & secrets.
To configure the password for the application, click New client secret, which will open the Add a client secret section. Enter a Description and an Expiry duration, then click Add.
The Azure portal will display the application password ONCE ONLY. You must use this password in Abiquo, so make sure to save it, because Azure will not display it again.
...
Assign permissions to the App
...
For each of the permissions:
Click + Add
Click the
Grant for … button
...
Category
...
... button
Azure Service Management
...
: user_impersonation
Microsoft Graph
...
: Application.ReadWrite.All
...
, RoleManagement.ReadWrite.Directory
Microsoft Partner
...
: user_impersonation
Microsoft Partner Center
...
: user_impersonation
After you add the permissions, and grant them for your account, the center of the screen should look as follows.
...
Add the application’s service principal to the Admin agents group in the CSP Partner’s Azure AD Active directory.
You can search for
...
Microsoft Partner
...
and
...
Microsoft Partner
...
Centerusing their application
...
IDs, which
...
are
4990cffe-04e8-4e8b-808a-1175604b879f
...
and
...
fa3d9a0c-3fb0-42cc-9193-
...
47c7ecd2edbdrespectively, in the
...
APIs my organization
...
owns section.
Configure authorization for the use of Azure ARM credentials in the multi-cloud platform
...
To create your own server to grant consent for the use of your Azure credentials, follow the instructions in the Azure documentation.
For general instructions, see https://docs.microsoft.com/en-us/partner-center/develop/partner-center-authentication#app--user-authentication and for Java instructions: https://docs.microsoft.com/en-us/partner-center/develop/partner-center-authentication#java-appuser-authentication.
...
Add the Azure CSP pricing and billing credentials to Abiquo
Before you add credentials, your begin:
Your administrator must create at least one compatible public cloud region in Azure ARM
...
They must allow your enterprise to access this region.
Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region .
For To add pricing and billing credentials for CSP accounts, in :
Edit the main tenant,
...
and go to Credentials → Pricing
Add the pricing credentials in the following format:
Code Block csp#dir-id#app-id#accessToken#refreshToken
...
So enter the text
csp#, the Directory (tenant) ID, Application (client) ID, access token, and refresh token as a single string and separate each element with a#(number/hash character).
...
Add billing enterprise properties in the reseller enterprise. The default values are as follows:
azurecompute-arm_discount = 0
azurecompute-arm_currency_code = USD
billing.azure.country_code = US
For more details, see Display Azure billing data.
Go to Pricing → Price factors and create a price factor factors for the reseller enterprise. See Manage price factors.
...
To activate compute and billing for a CSP customer, create :
Create an app in the customer’s Active Directory
...
Add the Azure ARM compute credentials to Abiquo for the customer enterprise.
If your customers will use billing only, then you can enter the subscription and tenant details only. See Add credentials of Azure reseller customers for billing only.
When customers have billing credentials, the billing data should display on the dashboard, see Display Azure billing data .