Enable Azure Advisor insights

Beta

Azure Advisor provides proactive and actionable recommendations to help you optimize your Azure deployments and improve the performance, security, and reliability of your resources.

You can enable the Azure Advisor insights feature to get curated Azure Advisor recommendations directly in the DoiT console, along with other DoiT Insights recommendations.

Required permissions

• Your DoiT account must have the Manage Settings permission.

• You must have a Microsoft Entra role with the following permissions:

  • permission to create a service principal to allow DoiT to access resources in your Azure environment
  • permission to assign a service principal the Reader role on a management group

Enable Azure Advisor insights

To enable the Azure Advisor insights feature:

1. Sign in to the DoiT console, select the gear icon () from the top navigation bar, and then select Microsoft Azure in the Cloud settings section.

2. Select Connect Azure subscription.

   

3. Select the Advisor feature if not already selected. You can expand the feature to review the required permissions.

   

4. Select Next to continue.

5. Follow the instrcutions displayed in the DoiT console to connect your Azure tenant.

   1. Enter the management group ID. See View management groups for how to find the ID.

   2. Copy the Azure CLI command and run it in Azure Cloud Shell to create a service principal, using the ID of the DoiT International enterprise application (see also az ad sp create).

      

6. Select Next to continue.

7. Grant the DoiT service principal the Reader role on the management group.

   1. Enter your tenant ID. See also Get subscription and tenant IDs in the Azure portal.

   2. Copy the Azure CLI command and run it in Azure Cloud Shell to grant the DoiT service principal the Reader role on the management group (see also az role assignment create).

   3. Copy the output role ID in the Cloud Shell and paste it to the DoiT console.

   4. Select Test connection to validate the configuration and make updates if necessary.

      

8. Once the connection test is successful, select Done to complete the setup.

Unlink Azure resources

To unlink Azure resources, select the three dots menu (⋮) at the rightmost end of the subscription entry, and then select Unlink.