Obtain Azure ARM credentials

Introduction

To work with Azure ARM in Abiquo, you'll need to add credentials to your Abiquo enterprise. You can add one set of credentials from your subscription to one Abiquo enterprise only.

1. Create an Azure Subscription.

   1. You may require separate credentials for some groups of regions, for example, regions in China.

2. Follow this guide, which describes how to obtain the details of the subscription and create an Application.

3. After you follow this guide, you'll have the following Azure attributes:

   1. Subscription ID

   2. Application ID

   3. Tenant ID

   4. Application password

   5. Offer ID (optional) for pricing credentials

Obtain details of your Azure subscription

To obtain details of your Azure subscription, do the following steps.

1. Log in to the Azure portal

2. From the Home view, click the Subscriptions icon. Or in the search box in the top menu bar, enter Subscriptions. Then select Subscriptions

3. Click on your subscription

    If the subscription does not display, check that you have selected the correct directory. Click on the directory name in the top right corner. From here you can switch directory
   
   

   Open

   

   Obtain details of your Azure subscription

4. Save the Subscription ID to enter in the Abiquo credentials.

5. If you purchased the subscription directly from Azure, you can also save the Offer ID for the pricing credentials.  

Create an ARM application using Azure portal

Abiquo uses the ARM application ID to access the ARM API and compute features.

To create an ARM application using the Azure Portal and obtain details of the application, do these steps.

1. Log in to the Azure portal

2. From the Home view, click the Azure Active Directory icon. Or in the search box, enter Azure Active Directory. Select Azure Active Directory
   
   

3. Click App registrations

4. Click New registration
   
   

   Open

   

   In App registrations, click New registration

5. To register the application, enter a Name, select the Supported account types, and enter a URL. The value of the URL will not be used, so it could be any URL. Click Register

6. Save the Application (client) ID and the Directory (tenant) ID, because you will need to configure them in Abiquo. Then click Certificates & secrets

7. To configure the password for the application, click New client secret, which will open the Add a client secret section. Enter a Description and an Expiry duration, then click Add.
   
   
   
   

   The Azure portal will display the password ONCE ONLY. You must use this password in Abiquo, so make sure to save it, because Azure will not display it again.
   
   
   
   

8. Go to the Subscriptions menu, select the subscription you want to associate the application with, and add a new permission for it with these steps.

   1. Select Access control (IAM)

   2. Click Add

   3. Click Add role assignment

   4. In the dialog, select the Contributor role, and in the Select box, enter the name of the application. Then click Save

9. Go to the Subscriptions menu and select Resource providers

   1. Search for the Microsoft.Compute provider and click Register to add it for the subscription if it is not already added

   2. Search for the Microsoft.Network provider and click Register to add it for the subscription if it is not already added

Add the Azure ARM compute credentials to Abiquo

Before you add credentials, an administrator must create at least one compatible public cloud region in Azure ARM, and allow your enterprise to access this region. Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region .

To connect Abiquo to your Azure ARM account, add the Azure ARM credentials obtained in the above steps to Abiquo, with the following steps.

1. Log in to Abiquo

2. Go to Users view

3. Edit the enterprise and go to Credentials → Public

4. Select the Azure ARM provider, and enter the credentials in the following format.

• Identity: 

  subscription-id#app-id#tenant-id

  This means you should enter the Subscription ID, Application ID and Tenant ID, as a single string and separate each element with a '#'. For example: 

  566058dd-80bc-4ccc-8d6e-e9ac00c4b4a1#8927a710-4f4d-4d11-811c-94c36e9b2c3f#fbb96b71-f92c-4f78-acf7-cd88bdee36b1

  
  
  

• Credential: Enter the password for the Application.

Add the Azure pricing credentials to Abiquo for standard accounts

Before you add credentials, your administrator must create at least one compatible public cloud region in Azure ARM, and allow your enterprise to access this region. Some regions may require separate credentials, for example regions in China, and you will need to obtain credentials and create these regions separately. See Create a public cloud region

For Azure, the format of the pricing credentials identity for standard Azure accounts is as follows.

• Identity

  normal#subscription-id#app-id#tenant-id#offer-durable-id

  The text string "normal#" indicates a standard account. We recommend that you specify the "normal#" text string, even though it is the default option.

  The Offer-Durable-ID is the Offer ID from the Azure portal. See Display Azure billing data  for billing dashboard instructions.  

• Credential: Enter the password for the Application

For CSP accounts, see Obtain Azure ARM pricing credentials for CSP