Configure Azure Identity and Access permissions for cloud monitoring in the Orion Platform

10/16/2018 6:50 PM

9/19/2023 2:54 PM

Configure IAM permissions in the Azure Portal to integrate the AD app with the Orion Platform. Your account must have the User Access Administrator role to manage account permissions and perform actions against VMs, such as stopping polling.

Role-based Access Control (RBAC)  (© 2018 Microsoft, available at https://azure.microsoft.com/en-us/?v=18.40, obtained on October 16, 2018) may be customized for your organization and can affect how the Orion Platform works with Azure. Consult your subscription administrator and see Azure documentation (© 2018 Microsoft, available at https://azure.microsoft.com/en-us/?v=18.40, obtained on October 16, 2018) for details. 

Server Application Monitor

1. In the Azure Portal, click More Services > Subscriptions.

2. Click the Subscription related to the Azure account to display details about it.

   Record the Subscription ID for later use in the Orion Web Console.

3. In the Subscriptions pane, click Access Control (IAM).

4. Click Add in the Permissions pane.

   Screenshots property of © 2017 Microsoft.
   

5. In the Add permissions pane, follow these steps:
   1. Select Contributor or Reader in the Role field.

      Note: If you select Reader, you cannot execute actions such as start, stop, or restart on the VM.

   2. Select Azure AD user, group, or application in the Assign access to field.

   3. In the Selected members section of the pane, click the Azure AD app created for the Orion Platform to select it. 

      To search for an AD app, enter its name — or part of its name — in the field provided.

   4. Click Save.

(Screenshots property of © 2017 Microsoft.)

Adding Access Control for an application

1. Log in to https://portal.azure.com
2. From the left panel select Subscriptions tab. If it is not visible, go to More services to find it.
3. Click on the name of your subscription listed in a table.  
4. Click on the Access control (IAM) link.
5. Start adding a new permission by clicking on the Add button at the top of the screen.
6. Add role assignment and select Role as Owner and click Next.
7. In the Select Members field type the name of an application for which you want to add permissions. When the application is found by the search engine, click on its name to add it to the Selected members list.  NOTE: This is the application name that you created earlier.  In the example it was SAM.
8. Click on the Save button to finish the process.

 

See also Configure Microsoft Azure for cloud monitoring in the Orion Platform.