Azure Portal Setup
Tip
Virtana recommends setting up Azure using the CLI for the best integration experience.
If you prefer to use the Microsoft Azure portal to collect the information needed for the integration setup in Virtana Platform, you must have administrative access to both the Azure portal and Virtana Platform.
Prerequisites
You must have an administrator role in Azure and in Virtana Platform.
If you cannot assign yourself the application administrator role, you must request it from your Azure administrator. For more information, see the Microsoft documentation.
You must have installed the Azure CLI.
Tip
If your Azure account is enrolled in an EA (Enterprise Administrator) setup, please ensure the "AO view charges" setting is enabled so assets within subscriptions have access to cost data. See Azure's documentation for how to confirm it's enabled.
Tip
If your Azure account is enrolled with a Cloud Service Provider (CSP), please ensure that the cost visibility policy for Azure Usage charges is set to Yes. This setting grants assets within your subscriptions access to cost data. See Azure's documentation for how to enable the policy to view Azure usage charges.
Perform the following tasks:
Open the Azure portal and select Azure Active Directory from the left or top menu.
Select App registrations from the Manage options.
Select + New Registration at the top.
Provide a name for the application.
Example: Virtana-Integration
You will need to provide this name in a later task, when setting roles.
Select Accounts in this organizational directory only (Default Directory only - Single tenant) for Supported Account Types.
Under Redirect URI (optional), select Web and input the URL to access the Virtana Platform UI.
Enter
https://<env>.cloud.virtana.com, where <env> is the variable used for your locale. For example: https://app.cloud.virtana.com/.
Select Register at the bottom of the window.
This completes creation of the AD application.
Next, you must obtain Azure IDs and credentials.
You must collect the Tenant ID, Subscription ID, Application ID, and Client Secret Value from Azure and enter them in the Virtana Platform integration setup form.
In Azure, ensure you are signed in to the account that you want to connect to Virtana Platform.
In Virtana Platform:
Navigate to Settings>Integrations>Cloud Providers.
Click Add Integration and select the appropriate integration type.
Optional: Enter a descriptive name for the integration instance to identify its purpose.
Tip
Keep Virtana Platform open to the integration setup page until you complete this task.
In Azure, navigate to the Overview page for the integration application you previously created (e.g.,
Virtana-Integration).Copy the Application (client) ID in Azure and paste the value into the Application ID field in the Virtana Platform integration setup page.
Copy the Directory (tenant) ID in Azure and paste the value into the Tenant ID field in Virtana Platform.
Navigate to the Azure Subscriptions page, copy the subscription ID for the application you previously created, and paste the ID into the Virtana Platform setup form.
Click the name of the Subscription you are using, navigate to Resource Providers and ensure the microsoft.insights resource provider is registered.
This resource is needed to gather performance metrics for your Azure objects.
Navigate to Azure Certificates & secrets and the Client Secrets tab.
Click + New client secret, provide a description, and select an Expiration for the key.
Click Add.
The Secret is now listed in the Client secrets section.
Copy the Secret’s Value and paste it into the Client Secret Value field in Virtana Platform.
Important
The access key is only shown in the Azure portal for a few minutes.
This completes setting the Azure IDs and credentials in Virtana Platform.
Next, you must add delegated permissions in Azure.
In Azure, navigate to the API Permissions section of your Virtana integration (e.g.,
Virtana-Integration).
Select + Add a permission.
A side panel appears.
Select the Azure Service Management card.
Select Delegated Permissions.
Note: Granting delegated permissions authorizes the registered application (Virtana Platform) to make requests to the Azure API only. Details of what data can be read is configured in the next step.
Enable the user_impersonation permission.
Select Add permissions.
This completes the addition of delegated permissions.
Next, you must set an IAM read-only role for the Virtana Platform integration.
In Azure, navigate to this subscription’s Access Control (IAM) tab.
Select Add > Add role assignment.
A side panel appears.
Complete the following fields:
Role:
Monitoring Reader
Reader and Data Access : This role is required to read the Cost and usage report generated from the Export Job.
Assign access to: Azure AD user, group, or service principal
Select: Enter the name of the application you previously created (ex.L Virtana-Integration( and select the application.
Select Save.
Tip
You can verify the permissions by selecting Role Assignments and searching for the Virtana Platform application.
Important
Important
Refer to Using an Existing Export Job
Return to the Virtana Platform integration setup form, verify each field has been filled in accurately, and then click the Save button and close the form.