To link an Azure account on the ElvenWorks platform, you need to go to the Azure portal link and click on “New registration”. In the section to register an application, you need to fill the “Name” field with the id 1p-agent, as shown in the image below and, then, click on “Register”.
On the left sidebar, click on “Certificates & secrets”, and, then, click on “New client secret”. In the Description field, fill in the identification: 1p-agent-secret, set the expiration date for 24 months and click on “Add”. After completing these steps, save the identification in the Value field, as this information will be used later on to register the cloud on the platform. If you exit the window and have not copied the ID, you will have to do the process again.
Again on the sidebar, click on “Overview”, copy the information in the “Application (client)” ID and “Directory (tenant) ID” fields and save this information along with the Value identification.
In the Azure portal, in the search bar, look for Subscriptions and click on it, as shown in the image below.
Copy the information in the “Subscriptions ID” field and save it to the clipboard. After saving, click on the link in the “Subscription name” field and enter Access Control (IAM) in the sidebar.
In the Access Control (IAM) area, there will be a box on the bottom right corner with the name Create a custom role, once you find this field, click on “Add”.
In the options on the upper bar, click on “JSON”, on “edit” and copy and paste the code that appears below. For the code to run successfully, you must paste the Subscription ID, copied earlier, on the sixth line, replacing the phrase “PASTE THE SUBSCRIPTION ID HERE”.
{
"properties": {
"roleName": "1p-agent-role",
"description": "1p role",
"assignableScopes": [
"/subscriptions/COLAR O SUBSCRIPTION ID AQUI"
],
"permissions": [
{
"actions": [
"Microsoft.Compute/*/read",
"Microsoft.Compute/availabilitySets/*",
"Microsoft.Compute/virtualMachines/*",
"Microsoft.Compute/disks/*",
"Microsoft.Network/*/read",
"Microsoft.Network/publicIPAddresses/*",
"Microsoft.Network/networkInterfaces/*",
"Microsoft.Network/networkSecurityGroups/*",
"Microsoft.Network/networkInterfaces/write",
"Microsoft.Network/virtualNetworks/subnets/join/action",
"Microsoft.Storage/storageAccounts/*",
"Microsoft.Resources/*/read",
"Microsoft.Resourcehealth/healthevent/*",
"Microsoft.Resources/tags/*",
"Microsoft.Resources/marketplace/purchase/*",
"Microsoft.Resources/subscriptions/resourceGroups/*"
],
"notActions": [],
"dataActions": [],
"notDataActions": []
}
]
}
}
After pasting the code and replacing the text with the Subscription ID, click on “Save” in the upper right corner, to save, click “Next” and then “Create” to generate a new role.
Still in the Access Control (IAM) panel, click on “Add”, on the upper bar and then on “Add role assignments”. In the “Role” field, select the identification 1p-agent-role, in “Select” fill in the identification 1p-agent and click on Save.
After this tutorial, check out the next steps to configure your cloud on the platform.