Azure Collection Setup


In order for Hyperglance to be able to authenticate to the Azure APIs to collect the data needed you need to follow some steps that will first create an app, then will assign that app ‘Reader’ access for each subscription you want to bring into Hyperglance.


NOTE:  You will need to have a role Global Administrator, Application Administrator or Application Developer in your Azure Active Directory in order to complete these steps if "Users can register applications" setting is set to No. See below:




You also must be a Service Administrator, Co-Administrator, Owner or User Access Administrator in your subscription in order to complete these steps (in the grant roles step, the minimum role is User Access Administrator).


Once this is done you will have the required  identifiers needed for your Azure environment.

  i.  Account Alias (user-defined alias to the given combination of credentials)

  ii.  Subscription ID

  iii.  Application ID

  iv.  Client Secret


We will find these identifiers through the course of this tutorial which consists of the following steps:


Step 1: Register the Hyperglance app with Azure Active Directory

Step 2: Find the Application ID

Step 3: Create a Secret

Step 4: Find your Subscription ID

Step 5: Grant roles

Step 6: Configure Hyperglance


Step 1: Register the Hyperglance app with Azure Active Directory

a. Log in to your Azure Account through the Azure portal.
b. Select Azure Active Directory from the left panel.




c. Select App registrations.



d. Select New registration.





e. Give it a name and click Register.





Step 2: Find the Application ID


Click App registrations and you can then see the application ID.  The same ID can be found also under Enterprise applications.


Copy the Application ID, it will be needed later.


Step 3: Create a Secret


a. Select Certificates & secrets and click New client secret.



b. Add description (not mandatory), select the expiration and click add.



c. Copy the displayed client secret value, it will be needed later. You won't be able to retrieve it after you leave this page.


Step 4: Find your Subscription ID


a. In your Azure portal dashboard select All Services and Subscriptions.



b. Copy the relevant Subscription ID, it will be needed later.


Step 5: Grant roles


Here we grant the Hyperglance application access to monitor your Azure environment.


Note: You can only do this if you are a Service Administrator, Co-Administrator, Owner or User Access Administrator.


a. To assign a role at the subscription scope, select All Services and Subscriptions again.
And there select your subscription, Access control and click Add (Add a role assignment).





b. Select the role.  You should grant either 'Reader' or 'Contributor' role. 

  • Reader is read-only so you will not be able to use Hyperglance’s management actions such as "Add Tag". 
  • Contributor allows Hyperglance Actions to work.


                   



c. Click Save to finish assigning the role.


NOTE: Depending on your network setup you may need to configure Hyperglance to use a proxy. See here for instructions




Step 6: Configure Hyperglance


a. In your browser visit the Hyperglance Admin Panel  https://IP_address. Make sure you use https as the protocol (not http).


b. Select the Azure collector and click on the Add Record button (if this window below did not automatically appear).


c. Fill in the following details:

i. Account Alias – This can be anything you want but must be unique and should be informative.

ii. Subscription ID – See “Step 4: Find Your Subscription ID”

iii. Application ID – See “Step 2: Find the Application ID”

iv. Key – See Step 3: “Create a Secret”


d. Click submit.


Congratulations! You have successfully finished setting up Azure in Hyperglance.