[CLI] Azure Subscriptions Account Onboarding for Target

The Target is required to implement the following steps within the Azure Cloud Shell. Please sign into the Azure console using the admin account where billing has been set up, and then initiate the Cloud Shell from the navigation bar.

To manage an Azure Active Directory (AAD) app and create a client secret, the Active Directory administrator role is required

Step-1 : Create AAD & Secret

az ad sp create-for-rbac --display-name "<APP_NAME>" --years=2 -o table

• <APP_NAME>: AD app name of your choice

• After executing the command, capture App Id, Password(Secret) and Tenant id and share it with the partner company

To assign permissions to the Azure Active Directory (AAD) app, it is recommended to have the Owner role. Alternatively, you can have both the Contributor and User Access Administrator roles.

Step-2 : Assign Permissions to the App

az role assignment create --assignee "<APP_ID>" --role "Reader" --scope "/subscriptions/<SUBSCRIPTION_ID>" -o table

• <APP_ID>: AD app id captured in Step-1

<SUBSCRIPTION_ID> : Enter your subscription id. Follow this link to capture id https://learn.microsoft.com/en-us/azure/azure-portal/get-subscription-tenant-id#find-your-azure-subscription

Capture the below details and share them with your partner.

1. Active Directory (Tenant) ID

2. Application (Client) ID

3. Application (Client) Secret