[CLI] Azure Subscriptions Account Onboarding for Target
The Target is required to implement the following steps within the Azure Cloud Shell. Please sign into the Azure console using the admin account where billing has been set up, and then initiate the Cloud Shell from the navigation bar.
To manage an Azure Active Directory (AAD) app and create a client secret, the Active Directory administrator role is required
Step-1 : Create AAD & Secret
az ad sp create-for-rbac --display-name "<APP_NAME>" --years=2 -o table
<APP_NAME>
: AD app name of your choiceAfter executing the command, capture App Id, Password(Secret) and Tenant id and share it with the partner company
To assign permissions to the Azure Active Directory (AAD) app, it is recommended to have the Owner role. Alternatively, you can have both the Contributor and User Access Administrator roles.
Step-2 : Assign Permissions to the App
az role assignment create --assignee "<APP_ID>" --role "Reader" --scope "/subscriptions/<SUBSCRIPTION_ID>" -o table
<APP_ID>
: AD app id captured in Step-1
<SUBSCRIPTION_ID> : Enter your subscription id. Follow this link to capture id https://learn.microsoft.com/en-us/azure/azure-portal/get-subscription-tenant-id#find-your-azure-subscription
Capture the below details and share them with your partner.
Active Directory (Tenant) ID
Application (Client) ID
Application (Client) Secret