Required permissions to auto-add Azure Subscriptions for monitoring in Site24x7

Follow the steps below to provide the necessary permissions to auto-add Azure Subscriptions under the same tenant for monitoring when they are created or added in the Azure portal.

1. Go to the Azure portal and navigate to Management groups.

 

2. Select the Management group, under which the subscriptions you want to monitor are listed, and then click Access Control (IAM) > + Add > Add role assignment. Select the role you want to apply.

Though the Reader role is enough for monitoring purposes, the Contributor role is required to do IT automation and write operations in the Azure portal.

3. Click + Select members from the Members tab. In the right pane, choose the application you have created. Click Select.

4. Your application's name will now be added to the Members field. Click Next.

5. In the Review + assign tab, confirm if the details are correct and then click Review + assign.

6. Once you have completed the above steps, go to Site24x7 and add an Azure monitor using your Azure credentials.

Once the required role is applied to the Management group level, it will be applied to all the descendant Subscriptions automatically. Also, if any new Subscriptions are added to the tenant, attach the Subscriptions to the respective management group.

The above steps can also be followed when a Subscription is not listed for monitoring in Site24x7.

 

• Related Articles

• What should I do if an Azure resource is not added?

  Check if you have a sufficient license: If an Azure resource is not discovered or added in Site24x7, please check if you have a sufficient license. If not, upgrade your license by contacting sales@site24x7.com. Check if the Subscription has ...

• How many API calls does Site24x7 Azure monitor make

  Site24x7 Azure monitoring uses APIs to retrieve the health and performance metrics, as well as the configuration data on your Azure resources. Microsoft charges based on the total number of API calls made. Therefore, the cost incurred is directly ...

• Unable to retrieve Azure Key Vault components

  You will not be able to retrieve the Azure Key Vault components, like keys, certificates, and secrets, if you have not provided the sufficient permissions. Access configuration permission To track all of your Azure Key Vault components, ensure that ...

• How to create a custom view of Azure monitors based on tags

  Categorize your Azure resource monitors based on tags, like the resource group, subscription, and location, either while adding or editing an Azure monitor. While adding an Azure monitor On the Add Azure Monitor page, under Advanced Configuration, ...

• How to derive the Client Secret value from the Azure portal

  Use the below steps to create the Client Secret value from the Azure portal: 1. Log in to the Microsoft Azure portal. 2. Search and navigate to the application you have created for monitoring. If you are unsure about the application name, you can ...