Azure

Onboard an Azure Subscription

Azure Application Creation

1. Log in to Azure Portal (https://portal.azure.com/) and navigate to Azure Active Directory(AAD) -> App Registration.

2. Select "New Registration" to create a new app registration for AAD.

3. Give a friendly App Registration name and register it.

4. Once registered, new application will be created.

5. Navigate to "Certificates & Secrets" available in the navigation.

6. Create a new client secret for the newly created application.

7. Give a friendly description for the secret and select its expiry time based on the need and complete the process by adding it.

8. Once the client secret is created, copy the value and save it for the future use, since it can't be retrived again.

9. Now, an application is created for the subscription with client secret. The details from the Application Overview can be used to onboard Azure Connection for the endpoint type "Azure Subscription Details" without logging in.

10. A detailed explanation and steps for onboarding Azure subscription in Hybr is available below.

Cost Export Creation

1. Log into Azure Portal(https://portal.azure.com/) and navigate to Cost Management.

2. Select "Export" from navigation option available.

3. Add the cost exports for the selected subscription.

4. Give a friendly name for the cost export being added.

5. Select the export type as "Daily", "Weekly", "Monthly" or "One time" based on the need.

6. Hybr supports the export type of "Daily","Monthly" and "One time", so cost exports can be created for all the three types.

7. Provide Storage accout details, where the cost exports need to be stored.

8. Either an existing account or new account can be created for any available subscription.

9. The data provided during the cost export creation will be the exact same details that need to be provided during the azure connection onboard in Hybr for the endpoint type "Azure Cost Export" without getting Admin consent.

10. A detailed explanation and steps for onboarding Azure Cost Export connection in Hybr is available below.

Onboard an Azure Subscription

Log in to Hybr Admin portal and navigate to Reporting → Data Sources -> Connections page.

Note: The below pre-requisite is required only when the Azure Application has to be created automatically. It is not needed for manual onboard.

Pre-requisite:

A Global Administrator of Azure Active Directory is required to grant Admin Consent to Hybr Application for creating Azure Application and Service Principal to access the subscription resources.

1. Click on Grant Admin Consent button

2. Grant Admin Consent dialog opens. Click on ok button
3. Login with an account (Global Administrator) who has permissions to grant access. A pop-up window opens requesting permission to grant access for Hybr Application.

4. Select the checkbox 'Consent on behalf of your organization' and click Accept button.

Creating a Azure Connection

To create a new connection, follow these steps:

1. Log in to Hybr Admin portal and navigate to Reporting → Data Source -> Connections page.

2. Create a Azure Connection using Create Connection button.

4. Select Connection category as "Azure".

5. Give a friendly connection name to the Azure connection.

6. Click on any endpoint to create an Azure connection

7. Select or de-select Continue without Logging In Button based on your needs.

• Login and onboard (Continue without logging in is de-selected) - Will allow to login in using Azure credentials and automatically shows up the subscriptions available for the logged in user, from which he can select the required subscription.

• Manual onboard (Continue without logging in is selected) - The user can continue to onboard the subscription by manually providing the required details.( Prerequisite : The necessary needed resources for Azure connection( Azure Application, Service Principal, Cost Exports, etc.) should be created from Azure Portal and those details must be provided)

Login and onboard a subscription

8. Select the Endpoint as "Azure Subscription Details" and click Next button

9. Login pop-up window appears. Provide the credentials which has access to the subscription that needs to be onboarded

10. Once the login is successful, the user subscriptions will be listed.

11. Select the required subscription

12. Selecting 'Create Azure Application automatically' will create an application and service principal automatically if the logged in user has required permissions to create them. If the user does not have the permission to create an application, unselect the checkbox and click on next step

11. The Azure Application and service principal will be created and access control will be provided to the service principal to access subscription resources.

11. In next step, select 'Configure Azure Cost Export' to configure the cost exports for selected subscription

12. Select Cost Export Data Type as Daily, Monthly and One-Time, Type as Usage or Actual Cost.

13. Select the storage subscription and storage account where cost exports should be downloaded

11. Click Complete button to create the required Azure Cost Exports and Azure Connections.

12. This will create both Azure Api Endpoint Connection and Azure Cost Export Connection

Manual Onboard

Pre-Requisite : Create necessary resources before entering the credentials (e.g. Subscription)

Azure Cost Export

1. Select the Endpoint as "Azure Cost Export" and click Next button

2. Enter the Subscription Id for which cost export need to be done

3. Cost Export Data Type :

• Usage Cost - Selecting this will export the Usage Cost

• Actual Cost - Selecting this will export the Actual Cost

4. Export Type :

• Daily - Selecting this will export data with granularity Daily

Selecting this granularity will ask for Storage Directory for Daily granularity and its Exports name

• Monthly - Selecting this will export data with granularity Monthly

Selecting this granularity will ask for Storage Directory for Monthly granularity and its Exports name

• One Time - Selecting this will export data with granularity One Time

Selecting this granularity will ask for Storage Directory for One time granularity and its Exports name

5. Enter the Storage Subscription Id and Storage Account Connection string where the exports will be downloaded and complete the wizard

Azure Subscription Details

1. Select the Endpoint as "Azure Subscription Details" and click Next button

2. Enter the Subscription Id, Tenant Id, Application Id and Secret , Arm endpoint Url and TokenRequest Resource Url and click next

3. Configure Azure Cost Export

• Enable - will create a connection for azure cost export connection ( as same as above steps for cost export)

• Disable - Only creates connection with subscription details

4. Connection will be created

Editing an Azure Connection

If you want to make changes to an existing connection, follow these steps.

1. Log in to Hybr Admin portal and navigate to Reporting → Data Sources -> Connections page.

2. Select the connection and click on the "Edit" button

3. The saved details will be auto filled in the wizard

Cost Export Connection Wizard

Subscription Connection Wizard

3. Make the desired changes to your connection.

4. Save your changes.