---
title: "Manage Azure credentials | Grafana Cloud documentation"
description: "How to view, edit, disable, enable, and delete Azure credentials in Cloud Provider Observability"
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

# Manage Azure credentials

Use Cloud Provider Observability to view, edit, disable, enable, and delete your Azure credentials. Credentials connect your Azure account to Grafana Cloud and control which subscriptions and resources are monitored.

## Before you begin

- You have a [Grafana Cloud account](/auth/sign-up/create-user).
- You have either the Admin [Grafana Cloud basic role](/docs/grafana/latest/administration/roles-and-permissions/access-control/#basic-roles) or the [Azure Writer plugin role](/docs/grafana-cloud/monitor-infrastructure/monitor-cloud-provider/rbac/#cloud-provider-app-plugin-roles) for your stack. For steps to assign RBAC roles, refer to [Assign RBAC roles](/docs/grafana/latest/administration/roles-and-permissions/access-control/assign-rbac-roles/).
- You have at least one Azure credential configured in Cloud Provider Observability. If you haven’t configured one yet, refer to [Configure serverless Azure metrics with Cloud Provider](/docs/grafana-cloud/monitor-infrastructure/monitor-cloud-provider/azure/collect-azure-serverless/config-azure-serverless-cloudprovider/).

## View credentials

To view your Azure credentials and their configuration details:

1. In your Grafana Cloud stack, expand **Observability > Cloud Provider** in the main menu.
2. Click **Azure**, then click the **Configuration** tab.
3. Click the **Azure Metrics** tile.
4. On the **Azure credentials** page, click the name of the credential you want to view.
5. Optionally, click **Resources** to expand the section and review the subscriptions and resources included in this credential.
6. Optionally, click **View** next to a resource to see the specific metrics being collected for that resource.

## Edit a credential

To update an Azure credential’s account information, tags, static labels, subscriptions, resources, or metrics:

1. In your Grafana Cloud stack, expand **Observability > Cloud Provider** in the main menu.
2. Click **Azure**, then click the **Configuration** tab.
3. Click the **Azure Metrics** tile.
4. On the **Azure credentials** page, click the name of the credential you want to edit.
5. Click **Actions**, then select **Edit**.
6. On the **Edit credential** page, make your changes. You can update any of the following from this page:
   
   - Azure account information (Name, Client ID, Client secret, or Tenant ID)
   - Tag key and value filters
   - Static labels
   - Subscription IDs
   - Resources included for a subscription
   - Metrics, aggregations, and dimensions collected for a resource
7. Click **Save credential**.

## Disable or enable a credential

Disabling a credential stops metric collection for all resources associated with it without deleting the credential configuration. Use this option to temporarily pause monitoring—for example, during maintenance or to manage active series costs.

> Note
> 
> While a credential is disabled, no metrics are collected from the associated Azure resources. Existing data already ingested into Grafana Cloud is not affected.

### Disable or enable a credential in the UI

To disable an Azure credential:

1. In your Grafana Cloud stack, expand **Observability > Cloud Provider** in the main menu.
2. Click **Azure**, then click the **Configuration** tab.
3. Click the **Azure Metrics** tile.
4. On the **Azure credentials** page, select the checkbox next to the Credential name.
5. Click **Disable**.
6. Click **Disable credential** to confirm.

To enable a disabled Azure credential:

1. In your Grafana Cloud stack, expand **Observability > Cloud Provider** in the main menu.
2. Click **Azure**, then click the **Configuration** tab.
3. Click the **Azure Metrics** tile.
4. On the **Azure credentials** page, select the checkbox next to the Credential name.
5. Click **Enable**.
6. Click **Enable credential** to confirm.

### Disable or enable a credential using Terraform

Use the `enabled` attribute on the `grafana_cloud_provider_azure_credential` resource to control whether a credential is active. The attribute defaults to `true` when not set.

To disable an Azure credential, set `enabled` to `false` in your Terraform configuration and run `terraform apply`:

hcl ![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```hcl
resource "grafana_cloud_provider_azure_credential" "example" {
  stack_id      = "@@@your-stack-id@@@"
  name          = "@@@my-azure-credential@@@"
  client_id     = "@@@your-client-id@@@"
  client_secret = "@@@your-client-secret@@@"
  tenant_id     = "@@@your-tenant-id@@@"
  enabled       = false
}
```

To re-enable the credential, set `enabled` back to `true` and run `terraform apply`:

hcl ![Copy code to clipboard](/media/images/icons/icon-copy-small-2.svg) Copy

```hcl
resource "grafana_cloud_provider_azure_credential" "example" {
  stack_id      = "@@@your-stack-id@@@"
  name          = "@@@my-azure-credential@@@"
  client_id     = "@@@your-client-id@@@"
  client_secret = "@@@your-client-secret@@@"
  tenant_id     = "@@@your-tenant-id@@@"
  enabled       = true
}
```

For the full resource schema, refer to the [`grafana_cloud_provider_azure_credential`](https://registry.terraform.io/providers/grafana/grafana/latest/docs/resources/cloud_provider_azure_credential) Terraform resource documentation.

## Delete a credential

Deleting a credential permanently removes the credential and stops all metric collection for its associated resources. This action cannot be undone.

> Warning
> 
> Deleting a credential is permanent. If you want to temporarily stop metric collection, consider [disabling the credential](#disable-or-enable-a-credential) instead.

To delete an Azure credential:

1. In your Grafana Cloud stack, expand **Observability > Cloud Provider** in the main menu.
2. Click **Azure**, then click the **Configuration** tab.
3. Click the **Azure Metrics** tile.
4. On the **Azure credentials** page, click the name of the credential you want to delete.
5. Click **Actions**, then select **Delete**.
6. Click **Delete** to confirm.