Integrate with Azure Management Group or Subscription

Integrate Azure with Apono to manage access to your Azure Services

Apono offers Azure users a simple way to centralize cloud management through our platform. Through a single integration, you can manage multiple Azure services across various management groups and subscriptions.

Before you begin integrating with Azure, make sure you have the Apono connector installed in your environment.

• If you already have Azure Apono connector:

  • Make sure the connector's minimum version is 1.3.6. Use the following steps to update an existing connector.

• If you still don't have Azure Apono connector:

  • Install Azure connector on ACI using Azure CLI

  • Install Azure connector on ACI using PowerShell

  • Install Azure connector on ACI using Terraform

Configuration steps

In Apono

1. Go to Integrations, under Environment from the left navigator.

2. Under Integrations, click the Catalog tab and select Azure under Cloud Provider category.

3. In Azure integration page under Discovery, choose between Azure Management Group and Azure Subscription, then select the resource types you want to integrate with.

4. Under Apono connector, choose the connector with the required permissions to be used with your Azure environment.

5. Under Integration config step, provide the following information about your Azure environment:

Management Group

Variable	Value	Required
Integration Name	The integration name.	Yes
Azure Management Group Id	The Azure Management Group Id to integrate with.	Yes
Azure Primary Domain	The Microsoft Entra tenant Primary domain.	No
Disable Locks	Allows Apono to forcefully delete the Azure lock to be able to grant/revoke access to the required resource. Apono will recreate the lock after it has been deleted.	No (default to false)

Subscription

Variable	Value	Required
Integration Name	The integration name.	Yes
Azure Subscription Id	Leave empty if you want to connect to the subscription where connector is deployed.	No
Azure Primary Domain	The Microsoft Entra tenant Primary domain.	No
Disable Locks	llows Apono to forcefully delete the Azure lock to be able to grant/revoke access to the required resource. Apono will recreate the lock after it has been deleted.	No (default to false)

6. (Optional) In Get more with Apono step, you can set up the following:

Setting	Description
Custom Access Details	Customize the access details message that will be displayed to end users when they access this integration.
Integration Owner	Apono can use the integration owner for access requests approval if no owner is found. Enter one or more users, groups, shifts or attributes. This field is mandatory when using Resource Owners and serves as a fallback approver if no resource owner is found.
Resource Owner	Apono will sync each resource's owner from the source integration. Use this for Resource Owner access requests approval. Enter the tag key that contains owners info, and map it to an attribute in Apono.

---

Troubleshooting

Please refer to our troubleshooting guide if you encounter errors while integrating.

Next Steps

Create Integration Access Flow