Connect an Azure cloud account

This guide walks through creating an Azure service principal and connecting it to Vantage for cluster provisioning.

Prerequisites

• A Vantage account with admin permissions
• An Azure subscription with permission to create service principals

Create a service principal in Azure

1. Open the Azure Portal and navigate to Azure Active Directory > App registrations.
2. Click New registration. Enter a name (for example, vantage-connector) and click Register.
3. On the app overview page, copy the Application (client) ID and Directory (tenant) ID.
4. Navigate to Certificates & secrets > New client secret. Add a description, choose an expiry period, and click Add. Copy the secret value immediately.

warning

Client secrets expire based on the period you choose (6 months, 12 months, or 24 months). Set a reminder to rotate the secret before it expires, or cluster operations will fail silently.

5. Navigate to Subscriptions > [your subscription] > Access control (IAM).
6. Click Add role assignment and grant the service principal the Contributor role on the subscription.

Connect to Vantage

1. Click the Settings gear icon in the bottom-left sidebar and select Cloud Accounts.
2. Click + Create Cloud Account and select Azure.
3. Enter an Account Name and optional Description.
4. Enter the Azure credentials from the previous steps.
5. Click Create Cloud Account.

Validate the connection

Click the ... menu on the account row and select Validate. If validation fails, confirm the client secret has not expired and the service principal has Contributor access.

Related

• Manage cloud accounts
• Azure reference