Connect Azure Tenants

Connect your Azure tenants to enable advanced features.

Required permissions

Your DoiT account must have the Manage Settings permission.
You must have a Microsoft Entra role with the following permissions:
- permission to create a service principal to allow DoiT to access resources in your Azure environment
- permission to assign a service principal the Reader role on a management group

To connect an Azure tenant:

Sign in to the DoiT console, select Integrate from the top navigation bar, and then select Azure.
Select Connect Azure Tenant.
Select features that you want to enable. You can expand the feature to review the required permissions.
Select Next to continue.
Follow the instrcutions displayed in the DoiT console to connect your Azure tenant.
1. Enter your tenant ID. See also Get subscription and tenant IDs in the Azure portal.
2. Copy the Azure CLI command and run it in Azure Cloud Shell to create a service principal, using the ID of the DoiT International enterprise application (see also az ad sp create).
Select Next to continue.
Grant the DoiT service principal the Reader role on the management group. If you've selected more than one feature, you'll see multiple sections here, each for one feature.
1. Enter the management group ID. See View management groups for how to find the ID.
2. Copy the Azure CLI command and run it in Azure Cloud Shell to grant the DoiT service principal the Reader role on the management group (see also az role assignment create).
3. Copy the output role ID in the Cloud Shell and paste it to the DoiT console.
4. Repeat the steps above for each feature you've selected.
5. Select Test connection to validate the configuration and make updates if necessary.
If the connection test is successful, select Done to complete the setup.