Azure Management Group Manual CLI Onboarding

Azure Management Group CLI Onboarding

You can onboard all subscriptions as a group by following the CLI steps provided below

If you have already set up the Management Group for billing using the steps provided here Azure Management Group onboarding as billing you can utilize the same credentials to onboard the Management Group again.

To manage an Azure Active Directory (AAD) app and create a client secret, the Active Directory administrator role is required

Create AAD

az ad sp create-for-rbac --display-name "<APP_NAME>" --years=2 -o table

• <APP_NAME>: Enter the unique name. Recommended (digitalex_management_group)

• Capture App id and share it with Owner required to Assign Permissions to the App

• Capture Password (Secret) and Tenant id required to Connect Management Group

To assign permissions to the Azure Active Directory (AAD) app, it is recommended to have the Owner role. Alternatively, you can have both the Contributor and User Access Administrator roles.

Assign Permissions to the App

az role assignment create --assignee "<APP_ID>" --role "Reader" --scope "/providers/Microsoft.Management/managementGroups/<MANAGEMENT_GROUP-ID>" -o table

• <APP_ID> : Enter App id created in above step

• <MANAGEMENT_GROUP-ID>: Enter your management group Id(To Get Management Group id Navigate to Azure Console > Search Management Group > Capture tenant group id)

Connect Management Group

1. Login to DigitalEx

2. Go to Menu > Admin > Public Clouds

3. Click on +Management Groups & Enter required details

4. Click Connect.