Create an Azure service principal

In this milestone, you’ll create an Azure service principal that grants Grafana Cloud the necessary permissions to collect metrics from your Azure account. This service principal uses the principle of least privilege, providing the read-only access required for monitoring.

A service principal is an identity created for use with applications and services. In this case, the service principal allows Grafana Cloud to authenticate with Azure and read metrics data without requiring user credentials.

Create the service principal

To create an Azure service principal, complete the following steps:

1. On the Add new credential page in Grafana Cloud, click Setup instructions.

   The setup instructions display the Azure CLI commands needed to create the service principal.

2. Open a terminal or Azure Cloud Shell.

3. Log in to your Azure account:

   Bash Copy

   az login

4. List your available subscriptions to identify which subscriptions you want to monitor:

   Bash Copy

   az account list --output table

5. Create a service principal with the Monitoring Reader role for each subscription you want to monitor.

   Replace <subscription-id> with your Azure subscription ID:

   Bash Copy

   az ad sp create-for-rbac --name grafana-cloud-azure-metrics --role "Monitoring Reader" --scopes "/subscriptions/<subscription-id>"

   Note

   If a service principal with this name already exists, this command updates it with the specified role and scopes.

6. Save the output of the command, which includes the credential information you need for the next milestone:

   JSON Copy

   {
     "appId": "12345678-1234-1234-1234-123456789012",
     "displayName": "grafana-cloud-azure-metrics",
     "password": "your-secret-password",
     "tenant": "87654321-4321-4321-4321-210987654321"
   }

   • appId is the Client ID
   • password is the Client secret
   • tenant is the Tenant ID

The service principal is now created with read-only access to Azure Monitor metrics for the specified subscription.

In your next milestone, you’ll use this service principal to connect your Azure account to Grafana Cloud.