Connect your first Azure account
Add each Azure tenant you manage with an app registration (service principal). The dashboard then shows all of them here.
Accounts
| Name | Type | State | Account | Subscription | Resource group | Location | Size / SKU | Tags |
|---|
AI scan
Reports
No report selected.
Month-to-date actual cost from Azure Cost Management, cached for an hour because the API is heavily throttled.
Azure accounts
| Name | Tenant ID | Client ID | Cloud | Access | Subscriptions |
|---|
How do I create an app registration for an account?
- Sign in to the tenant:
az login --tenant <tenant-id> - Create a service principal with read access to the subscriptions you want to see:
az ad sp create-for-rbac --name azuredash --role Reader \ --scopes /subscriptions/<sub-id-1> /subscriptions/<sub-id-2>
The output gives you appId (Client ID), password (Client secret) and tenant (Tenant ID). - For cost figures, also grant Cost Management Reader:
az role assignment create --assignee <appId> --role "Cost Management Reader" --scope /subscriptions/<sub-id>
- Only where you want start/stop/tag control, grant a write role such as Virtual Machine Contributor, Website Contributor, Tag Contributor or Contributor.
- Paste the three values into Add account. Client secrets are encrypted before they are stored and never sent back to the browser.
Client secrets expire (default 1 year). When one does, the account card shows a sign-in error. Create a new secret with az ad sp credential reset --id <appId> and paste it into Edit.
Every change made through this dashboard: control actions, tag edits, account and settings changes, AI scans.
| Time | User | Action | Account | Resource / detail | Result |
|---|