Connect Azure account

To connect your Azure account, make sure you are logged on to Azure Management Console .

Navigate to Azure Active Directory blade, and press Add App registration button.

Set the application name to 'Prevasio CSPM'. Press Register button.

Once the application was registered, copy its details into the relevant fields below.

Make sure 'Prevasio CSPM' application is open in the App registrations page of the Azure Active Directory.

Select Certificates & secrets link and press New client secret button.

Add a new client secret as:

  • Description: prevasio-cspm
  • Expires: 12 months

Copy the Value of the newly added client secret 'prevasio-cspm' into the field below.

Navigate to Subscriptions blade to access all your Microsoft Azure subscriptions.

NOTE: To display all subscriptions, set the Subscriptions == global filter filter to All to display all subscriptions.

Select the Azure subscription that you want Prevasio CSPM to access.

Copy the selected subscription ID into the field below.

Make sure the selected subscription page is open in the Subscriptions blade.

Select Access control (IAM) link and click Add Add role assignment button.

Find Log Analytics Reader role, select it and then click Next button.

With the Log Analytics Reader role selected, press Select members button.

In the Select members pane, search for and then select the 'Prevasio CSPM' member. Press Select button.

Press Review + assign button to assign the 'Security Reader' role to 'Prevasio CSPM' app.

Repeat the steps above to assign the role AcrPull to the 'Prevasio CSPM' member.

Please check if the details collected from the steps 1-3 are correct. Press Save to connect your Azure account to Prevasio CSPM.