Authorize Apps for Subscriptions

  less than a minute  

Authorize App for Azure Subscriptions

The Azure scan module uses a registered Entra ID app to inventory Azure resources. This app must be authorized with the Reader role for all desired subscriptions. Without this authorization, the module cannot retrieve subscriptions via the Load subscriptions button in the wizard.

Prerequisite: The Entra ID app must already be registered (see Register Entra ID App).

Role Assignment for Subscriptions

The following steps must be performed for each subscription to be inventoried:

  1. Navigate to Subscriptions in the Azure Portal
  2. Select the relevant subscription
  3. Open Access control (IAM) in the menu
  4. Select Add → Add role assignment

“Role” tab:

  • Select the Reader role
  • Confirm with Next

“Members” tab:

  • Select User, group, or service principal
  • Click Select members
  • Search for and select the Entra ID app created for Docusnap
  • Confirm with Select

“Review + assign” tab:

  • Review settings
  • Complete with Review + assign