Discover CIs in Microsoft Azure

Configure a Discovery schedule to find the configuration items in your Microsoft Azure subscriptions.

Azure discovery

After you run discovery on Azure resources, check the Azure Resource Type [azure_resource_type] table, which contains the information on all the Azure Resources. Check the Azure Datasource Type Mapping [azure_datasource_type_mapping] table to see more attributes of discovered Azure CIs.

Configure an Azure subscription for Discovery

Create an account record in the instance that matches your Azure subscription. This account record is necessary for the instance to reach your cloud resources in Azure.

Before you begin

Role required: admin

Procedure

  1. Navigate to Microsoft Azure Discovery > Accounts (Subscriptions).
  2. Click New.
  3. Use the following information to fill out the Azure Subscriptions form:
    • Name: Descriptive name for this account.
    • Subscription ID: The subscription ID that you configured in Azure.
  4. Click Submit.

Configure Azure service principals for Discovery

Configure Azure service principals on the instance to allow Discovery to find your Azure resources.

Before you begin

  • Role required: admin
  • A service principal on the Azure portal.
  • The Azure client ID and tenant ID, which you obtain from the Azure portal.

Procedure

  1. Navigate to Microsoft Azure Discovery > Credentials (Service Principals).
  2. Click New.
  3. Fill in the form fields (see table).
    Field Value
    Name Enter the name of the service principal to register with the instance.
    Tenant ID and Client ID Paste the values that you obtained from the Azure portal.
    Authentication Method Select Client secret.
    Note: Client assertion is not supported.
    Secret key Paste the secret key that was generated while creating the Azure Service Principal.

    This field appears when Authentication method is Client secret.

  4. Right-click the form header and click Save.
  5. Grant Service Principal permission to the subscriptions that you want to manage as described in the Azure Resource Manager documentation.
  6. Click the Get Subscriptions related link.
    The instance discovers your organization's Azure subscriptions. This discovery process discovers only which subscriptions the Service Principal has access to. The process does not discover other resources.

Create a Discovery schedule for an Azure subscription

Create a Discovery schedule for an Azure subscription to find the resources that the subscription is allowed to manage.

Before you begin

  • Role required: admin
  • A service principal associated with an Azure subscription.

Procedure

  1. Navigate to Microsoft Azure Discovery > Accounts (Subscriptions).
  2. Open the subscription for which you want to create a Discovery schedule.
  3. Click the Create Discovery Schedule related link.
  4. On the Discovery Schedule form, specify the schedule for Discovery.
    Field Value
    Name Name of the Azure subscription that uses the Discovery schedule that is defined on this page.
    Discover Type of resources to discover.
    MID server MID server that will manage the Discovery process.
    Active Check box to activate this schedule.
    Max run time Overall time period over which the schedule applies. For example, enter 365 days if you want this schedule to be used for one year. Specify a period less than a day using hh:mm:ss format.
    Run How often the schedule runs.
  5. Click Submit.

Result

Discovery runs and populates your CMDB (configuration management database) and images that you can later approve to offer to cloud users in the catalog. The current state of the resource, if applicable, is updated accordingly (for example, Azure virtual machine instances, Azure virtual networks, Azure subnets, etc.).