Skip to main content

Microsoft Azure Prerequisites

Cloudaware connects to Azure using an Azure AD/Microsoft Entra ID app registration (service principal) and Azure Resource Manager/Microsoft Graph APIs. Before you start the setup steps, make sure the following prerequisites are in place.

Cloudaware Prerequisites​

  • Access to a Cloudaware account.
  • A user with access to the Admin Console and permissions to manage cloud accounts, organizations, and integrations (Cloudaware Administrator).

Azure Directory & RBAC​

  • An Azure AD tenant where you can register applications.
  • Permissions in that tenant:
    • Owner or User Access Administrator at the scope where you will assign roles (management group and/or subscription).
    • Permission to create app registrations and grant admin consent for Microsoft Graph and Azure Service Management APIs.
  • One or more subscriptions to onboard into Cloudaware.
    • Optionally a Tenant Root Management Group if you want Cloudaware to automatically discover and add subscriptions at that level.

Resource Provider Registration​

Ensure the following resource providers are registered in each onboarded subscription (most are enabled by default):

  • Microsoft.Resources
  • Microsoft.Compute
  • Microsoft.Network
  • Microsoft.Storage
  • Microsoft.Insights
  • Microsoft.ContainerService (for AKS)
  • Additional providers for services you expect Cloudaware to inventory (for example, Databricks, Key Vault, SQL, and others).

Network & Connectivity​

Because Cloudaware runs as a SaaS platform, Azure integration uses outbound calls from Cloudaware to Azure public (or sovereign) cloud endpoints:

  • No inbound connectivity from your network to Cloudaware is required.
  • Confirm that Azure public or sovereign endpoints (management, Graph, login) are reachable from Cloudaware according to your security policies.
  • If you use private/hybrid connectivity patterns or Breeze Agent–based data collection, follow the Breeze Agent network requirements in addition to this guide.

Compliance & Approvals​

  • Internal approval to grant the required read‑only RBAC roles and additional permissions described in Least-Privilege Policies.
  • Any change‑management tickets or reviews needed to create the Cloudaware app registration and assign roles.

Once these prerequisites are met, continue with Setup to configure the Azure app registration, assign roles, and onboard directories and subscriptions into Cloudaware.