Skip to main content

Azure

Create a free Vantage account then follow the steps below to integrate Azure costs.

Azure Cost Reports

Connecting Your Azure Account​

Vantage integrates with your Azure account through the use of a Active Directory Service Principal. This principal is then assigned access to either management groups or individual subscriptions. Any subscriptions that are part of a resource group will be automatically imported.

Read-Only by Default​

The service principal is granted Reader permissions. It does not have permissions nor will it ever attempt to make any changes to your infrastructure.

Creating an Azure Service Principal​

az ad sp create-for-rbac -n "vantage"

This will output the following:

{
  "appId": "2d218f0f5-7ad5-4a12-abc7-bad2889d6407",
  "displayName": "vantage",
  "password": "8zkj3~yswKd433U12SHrvp22UoA6tOOOkZ_BYar2",
  "tenant": "1050a480-ef60-43d7-b8db-224aad100b60"
}

Record the appId, tenant and password as you will enter these into the Vantage console.

Granting the Service Principal Permissions​

Grant Permissions to the 'appId' from the service principal created above. The scope can be a subscription or management group.

az role assignment create --assignee <SERVICE_PRINCIPAL_APP_ID> \ 
  --role Reader \ 
  --scope "/providers/Microsoft.Management/managementGroups/<MANGEMENT_GROUP_ID>"

Save the Credentials in Vantage​

Visit the integrations page and add an Azure Integration.

Azure Connection