Obtain Azure ARM credentials

Introduction

To work with Azure ARM in Abiquo, you'll need to add credentials to your Abiquo enterprise. You can add one set of credentials from your subscription to one Abiquo enterprise only.

Create an Azure Subscription.
1. You may require separate credentials for some groups of regions, for example, regions in China.
Follow this guide, which describes how to obtain the details of the subscription and create an Application.
After you follow this guide, you'll have the following Azure attributes:
1. Subscription ID
2. Application ID
3. Tenant ID
4. Application password
5. Offer ID (optional) for pricing credentials

To use the platform's billing features only (without the compute features), you do not need an ARM application. See Add credentials of reseller customers for billing only

Abiquo provides these instructions as a guide only and we update them occasionally.

Abiquo recommends that customers follow the instructions of the cloud provider, for example, at the time of writing for Azure:

Obtain details of your Azure subscription

To obtain details of your Azure subscription, do the following steps.

Log in to the Azure portal
From the Home view, click the Subscriptions icon. Or in the search box in the top menu bar, enter Subscriptions. Then select Subscriptions
Click on your subscription
If the subscription does not display, check that you have selected the correct directory. Click on the directory name in the top right corner. From here you can switch directory
Save the Subscription ID to enter in the Abiquo credentials.
If you purchased the subscription directly from Azure, you can also save the Offer ID for the pricing credentials.

Create an ARM application using Azure portal

Abiquo uses the ARM application ID to access the ARM API and compute features.

To use the platform's billing features only (without the compute features), you do not need an ARM application. See Add credentials of Azure reseller customers for billing only

To create an ARM application using the Azure Portal and obtain details of the application, do these steps.

Log in to the Azure portal
From the Home view, click the Azure Active Directory icon. Or in the search box, enter Azure Active Directory. Select Azure Active Directory
Click App registrations
Click New registration
To register the application, enter a Name, select the Supported account types, and enter a URL. The value of the URL will not be used, so it could be any URL. Click Register
Save the Application (client) ID and the Directory (tenant) ID, because you will need to configure them in Abiquo. Then click Certificates & secrets
To configure the password for the application, click New client secret, which will open the Add a client secret section. Enter a Description and an Expiry duration, then click Add

The Azure portal will display the password ONCE ONLY. You must use this password in Abiquo, so make sure to save it, because Azure will not display it again.
Go to the Subscriptions menu, select the subscription you want to associate the application with, and add a new permission for it with these steps.
1. Select Access control (IAM)
2. Click Add
3. Click Add role assignment
4. In the dialog, select the Contributor role, and in the Select box, enter the name of the application. Then click Save
Go to the Subscriptions menu and select Resource providers
1. Search for the Microsoft.Compute provider and click Register to add it for the subscription if it is not already added
2. Search for the Microsoft.Network provider and click Register to add it for the subscription if it is not already added

Add the Azure ARM compute credentials to Abiquo

Before you add credentials, an administrator must create at least one compatible public cloud region in Azure ARM, and allow your enterprise to access this region. Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region.

To connect Abiquo to your Azure ARM account, add the Azure ARM credentials obtained in the above steps to Abiquo, with the following steps.

Log in to Abiquo
Go to Users view
Edit the enterprise and go to Credentials → Public
Select the Azure ARM provider, and enter the credentials in the following format.

Identity:
```
subscription-id#app-id#tenant-id
```
This means you should enter the Subscription ID, Application ID and Tenant ID, as a single string and separate each element with a '#'. For example:
```
566058dd-80bc-4ccc-8d6e-e9ac00c4b4a1#8927a710-4f4d-4d11-811c-94c36e9b2c3f#fbb96b71-f92c-4f78-acf7-cd88bdee36b1
```
Credential: Enter the password for the Application.

Add the Azure pricing credentials to Abiquo for standard accounts

Before you add credentials, your administrator must create at least one compatible public cloud region in Azure ARM, and allow your enterprise to access this region. Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region

For Azure, the format of the pricing credentials identity for standard Azure accounts is as follows.

Identity
```
normal#subscription-id#app-id#tenant-id#offer-durable-id
```
The text string "normal#" indicates a standard account. We recommend that you specify the "normal#" text string, even though it is the default option.
The Offer-Durable-ID is the Offer ID from the Azure portal. See Display Azure billing data for billing dashboard instructions.
Credential: Enter the password for the Application

For CSP accounts, see Obtain Azure ARM credentials for CSP