Integrating Azure with CloudOps

This guide walks you through connecting your Azure account to CloudOps for resource collection and cost monitoring.

Prerequisites

Before connecting your Azure account to CloudOps, you need to configure Azure account settings for cloud resource collection.

Understanding Account Types

The following account types can be registered in CloudOps:

General Account

This is the basic account for collecting and managing individual Azure subscription resources. CloudOps’s General Account can be created in two ways:

Option 1) You can directly register an Azure service principal (Service Principal) using individual authentication keys.
Option 2) You can connect to a Root Account created in CloudOps.

Root Account

This is an account that manages multiple Azure subscriptions by connecting them at once.

You can create a Root Account in CloudOps that can be connected to General Accounts.
The Root Account is referenced and utilized when accessing General Accounts.

ℹ️

If you plan to manage multiple Azure subscriptions, register the Root Account once first, then connect each workload subscription as a General Account + Delegated (Assumed Role).

Register a Cloud Account

Navigate to Cloud Account and select Azure

In the CloudOps console, go to [Settings > Cloud Account] and click [+ Connect Account]. Select Azure as the provider and click [Next].

Select account type and connection method

In the Account Info step, specify the Account Type and Connection Method.

① Register a Root Account — skip if already registered.

Account Type: Root Account
Enter Subscription ID, Account Name, Description, and Tenant ID.

② Register a General Account

Account Type: General Account
Select a Connection Method:

Option 1) Direct (Access Key) — Register with individual authentication keys.

Option 2) Delegated (Assumed Role) — Connect to a Root Account. Select the Parent Root Account to delegate permissions.

ℹ️

Delegated accounts reuse the credentials from the selected Parent Root Account. No additional Client Secret is required — only the Subscription ID of the target subscription.

Enter credentials

Provide the credentials with permission to access the resources. You can enter via Input Form or paste Json Code.

Field	Required	Description
Subscription ID	Yes	Azure Subscription ID
Tenant ID	Yes	Azure AD Tenant ID
Client ID	Yes	Application (Service Principal) Client ID
Client Secret	Yes	Application Client Secret

ℹ️

These credentials come from the Azure App Registration you created during the Azure Account Settings step. The Service Principal must have the appropriate role assignments on the target subscription.

Verify

CloudOps verifies the entered credentials through Credential Format Verification and Account Validity Check. Once verification succeeds, proceed to the next step.

⚠️

If verification fails, check the following:

Credentials: Confirm that the Tenant ID, Client ID, and Client Secret are correct.
Verification permission: Account validity check calls the subscriptions.get() API. The Service Principal must have the Microsoft.Resources/subscriptions/read permission.
Resource collection permissions: Verify that the appropriate role assignment (Reader or custom role) is configured on the target subscription.

Save

Review the summary of Basic Info and Credentials, then click [Connect] to finalize.

When you save the settings, the integration completes and resource collection begins.