🔌Onboarding Azure account onto Economize
After signing up with Economize to connect your Azure account, select the Connect Azure option when choosing your cloud provider, and follow these steps:
Step 1: Create a New Application Registration
From the Azure portal, search for and navigate to Microsoft Entra ID.
In the left-hand menu, under Manage, select App registrations.
Click + New registration.
The Register an application screen will open up. For Name, enter Economize.
Leave all other settings as their defaults and click Register.
The app details will be displayed. Record the Application (client) ID and Directory (tenant) ID as these will be required later.
Step 2: Generate a Client Secret
On the same page, next to the Client credentials field, click Add a certificate or secret. (You can also access the Certificates and secrets screen from the left-hand menu.)
Click on + New client secret.
The Add a client secret pane will be displayed at right. For Description, enter a description, such as economize-secret.
For Expires, select an expiration option for the secret.
If this secret expires, you will need to supply Economize with a new secret before the expiration date.
Click Add.
The newly created secret is displayed. Copy the secret's Value and save it somewhere to add it to the Economize console later as this value will be displayed only once.
Step 3: Grant the Service Principal Permissions
Economize recommends assigning permissions to a management group that aggregates all your subscriptions. This way, all your subscriptions will be onboarded onto the platform at once.
From the top navigation, search for and navigate to Management groups.
Create a new one or open an existing management group for which you will be assigning permissions.
On the left navigation, click Access control (IAM).
Click Add role assignment.
On the Add role assignment screen, select Reader. Then, click Next.
For Assign access to, select User, group, or service principal.
Click + Select members. The Select members tab is displayed on the right. Search for the Economize app you created before. Select the listed app, then click Select.
Click Next > Review + assign.
Step 4: Create the billing export and Grant Billing account reader role to Economize
Make sure you're on the billing scope when performing the following steps.
To ensure you're on the billing scope, check the text on your cost management screen that states Billing account as in the image below:
Navigate to Cost Management + Billing, and from Billing scopes select the one for which you wish to create the billing export.
Click Export under Setting in the left-hand menu.
From the Export screen, click + Create, and select Create your own export.
Fill in the required fields as follows:
Type of data: Cost and usage details (actual)
Export name: Enter any name you want for the export, such as economize_export
Dataset version: 2021-10-01
Frequency: Daily export of month-to-date costs
Export description: Enter any description you want for the export
Click on ADD + Next.
Fill in the destination details as follows:
Storage type: Azure blob storage
Destination and storage: Choose Use existing or Create new, and fill in the information for fields (Subscription, Storage account, Container, and Directory) accordingly.
File partitioning: Set this to true
Overwrite data: Set this to true
Click on Next and then Create after reviewing the entered details.
When the export is created, run the export from the export page by selecting it and clicking Run now, once the run has been completed successfully it will indicate the same as follows:
Now, on the same page navigate to Access control (IAM), and click on + Add.
Select and grant the role Billing account reader to the application you created in the first step.
Step 5: Grant Economize Reader and Data Access permission
On the same page navigate back to the Exports tab under settings, and open up the export you just created, to click on the Storage account you used.
Select Access control (IAM).
Click +Add and then click Add role assignment.
Search for Reader and Data Access, select it, and then click Next.
Click + Select members and search for the Economize service principal.
Select that Economize service principal and click Select.
Click Review + Assign.
Step 6: Add configuration information to Economize console
After you complete all the above steps, add the Application (client) ID, Directory (tenant) ID, & Client secret value, you previously obtained, then click Connect.
SUCCESS
The data can take up few minutes to fully propagate within the newly created export.
So, you might not be able to use all the features right away but you can still utilize the Recommendations to start optimizing your costs.
Last updated