This page describes how to obtain:
Compute credentials for standard accounts and for customers of resellers.
Billing/pricing credentials for standard accounts
For CSP accounts, see Obtain Azure ARM pricing credentials for CSP.
For billing only access for reseller customers, see Add credentials of Azure reseller customers for billing only
Introduction
To work with Azure compute in Abiquo, you'll need to add credentials to your Abiquo enterprise. You can add one set of credentials from one subscription only to each Abiquo enterprise.
Create an Azure Subscription.
You may require separate credentials for some groups of regions, for example, regions in China.
Follow this guide, which describes how to obtain the details of the subscription and create an Application.
After you follow this guide, you'll have the following Azure attributes:
Subscription ID
Application ID
Tenant ID
Application password
Offer ID (optional) for pricing credentials
To use the platform's billing features only (without the compute features), you do not need an ARM application. See Add credentials of reseller customers for billing only
Abiquo provides these instructions as a guide only and we update them occasionally.
Abiquo recommends that customers follow the instructions of the cloud provider, for example, at the time of writing for Azure:
Obtain details of your Azure subscription
To obtain details of your Azure subscription, do the following steps.
Log in to the Azure portal
From the Home view, click the Subscriptions icon. Or in the search box in the top menu bar, enter Subscriptions. Then select Subscriptions
Click on your subscription
If the subscription does not display, check that you have selected the correct directory. Click on the directory name in the top right corner. From here you can switch directory
Save the Subscription ID to enter in the Abiquo credentials.
If you purchased the subscription directly from Azure, you can also save the Offer ID for the pricing credentials.
Create an ARM application using Azure portal
Abiquo uses the ARM application ID to access the ARM API and compute features.
To use the platform's billing features only (without the compute features), you do not need an ARM application. See Add credentials of Azure reseller customers for billing only
To create an ARM application using the Azure Portal and obtain details of the application, do these steps.
Log in to the Azure portal
From the Home view, click the Azure Active Directory icon. Or in the search box, enter Azure Active Directory. Select Azure Active Directory
Click App registrations
Click New registration
To register the application, enter a Name, select the Supported account types, and enter a URL. The value of the URL will not be used, so it could be any URL. Click Register
Save the Application (client) ID and the Directory (tenant) ID, because you will need to configure them in Abiquo. Then click Certificates & secrets
To configure the password for the application, click New client secret, which will open the Add a client secret section. Enter a Description and an Expiry duration, then click Add
The Azure portal will display the password ONCE ONLY. You must use this password in Abiquo, so make sure to save it, because Azure will not display it again.
Go to the Subscriptions menu, select the subscription you want to associate the application with, and add a new permission for it with these steps.
Select Access control (IAM)
Click Add
Click Add role assignment
In the dialog, select the Contributor role, and in the Select box, enter the name of the application. Then click Save
Go to the Subscriptions menu and select Resource providers
Search for the Microsoft.Compute provider and click Register to add it for the subscription if it is not already added
Search for the Microsoft.Network provider and click Register to add it for the subscription if it is not already added
Add the Azure ARM compute credentials to Abiquo
Before you add credentials, an administrator must create at least one compatible public cloud region in Azure ARM, and allow your enterprise to access this region. Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region.
To connect Abiquo to your Azure ARM account, add the Azure ARM credentials obtained in the above steps to Abiquo, with the following steps.
Log in to Abiquo
Go to Users view
Edit the enterprise and go to Credentials → Public
Select the Azure ARM provider, and enter the credentials in the following format.
Access key ID:
subscription-id#app-id#tenant-id
This means you should enter the Subscription ID, Application ID and Tenant ID, as a single string and separate each element with a '#'. For example:
566058dd-80bc-4ccc-8d6e-e9ac00c4b4a1#8927a710-4f4d-4d11-811c-94c36e9b2c3f#fbb96b71-f92c-4f78-acf7-cd88bdee36b1
Secret access key: Enter the password for the Application.
Click Add account
Add the Azure pricing credentials to Abiquo for standard accounts
This section applies to standard accounts, which were obtained directly from Microsoft and not through a reseller.
For CSP accounts, see Obtain Azure ARM pricing credentials for CSP
Before you add credentials, your administrator must create at least one compatible public cloud region in Azure ARM, and allow your enterprise to access this region. Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region
For Azure, the format of the pricing credentials identity for standard Azure accounts is as follows.
Access key ID:
normal#subscription-id#app-id#tenant-id#offer-durable-id
The text string "normal#" indicates a standard account. We recommend that you specify the "normal#" text string, even though it is the default option.
The Offer-Durable-ID is the Offer ID from the Azure portal. See Display Azure billing data for billing dashboard instructions.
Secret access key: Enter the password for the Application