Connect Azure account

Securely connect your Microsoft Azure account to Sedai's autonomous cloud platform. Optimize and automate your cloud infrastructure with step-by-step instructions.

If you do not have access to create a subscription in Azure, we recommend raising a ticket with your security team.

Summary: You can integrate your Azure virtual machines (VMs) either by creating a new application in your account or via multi-tenant service principal. These steps need to be repeated for each Azure account you want to connect to Sedai.

Sedai currently supports Azure Virtual Machines, Managed Disks and Azure Kubernetes Service (AKS).

Sedai individually connects to Kubernetes clusters, so AKS clusters are displayed independent of their corresponding Azure account. To connect your AKS workloads, we recommend deploying Sedai's Smart Agent within your cluster, but you can also setup with agentless access.

---

How to connect Azure VMs

Note: In Sedai, each Subscription ID is treated as a unique Account. Therefore, you cannot add multiple Sedai accounts with identical Subscription ID and Tenant ID. If you have multiple resource groups under a single Subscription ID that require monitoring, adding that Subscription ID as a single Sedai account will meet your needs. This holds true while using Azure client credentials or Multi tenant service principal.

Log in to your Azure portal and setup access using one of the following options:

• Azure Client Credentials: Create a new application and provide the following information to connect to Sedai: – Subscription ID

  – Tenant ID – Client ID – Client Credentials

• Multitenant Service Principal: Use an application created in Sedai’s Azure account. Sedai will use your Client ID and Client Credentials from Sedai’s Azure account to access your APIs. You will need to create a new service principal using Sedai’s application and provide the following information to connect to Sedai: – Subscription ID – Tenant ID

Once completed, navigate to https://yourcompany.sedai.app and click Connect Cloud to integrate your account within Sedai.

Integrate with Azure Client Credentials

In this approach, you will need to create and register a new single tenant application. (Note: Redirect URL is not required).

1. Client & Tenant IDs: Once application is created, go to its Overview page and copy and save the Client ID and Tenant ID; you will paste these into Sedai’s UI momentarily.

2. Subscription ID: Navigate to Subscriptions and copy the Subscription ID.

3. Secret Key: Navigate to your new application and go to Certificates & secrets. Generate a new secret key and copy the value.

4. Role Assignment at Subscription Level: Next, navigate to Access control and create a new role assignment and select Monitor Reader for the Job function role. Assign access to User, group, or service principal and click Select members to attach your newly created application to the assignment.

5. Role Assignment at Resource Group Level. Next, navigate to Access control under the required resource group and create a new role assignment and select Monitor Reader for the Job function role. Assign access to User, group, or service principal and click Select members to attach your newly created application to the assignment. Add role assignment in resource group Select Monitor Reader

Once complete, log in to your Sedai account and navigate to Settings > Integrations. Select Add Integration and follow the prompts to connect your Azure account.

Since you can add multiple Azure accounts to Sedai, you will be asked to give your integration a unique nickname — this helps you easily identify resources within Sedai.

Click the Test Connection button to verify your connection works. If the connection fails, please double-check that you've entered the correct information in each field. If the connection is successful, click Next to connect a monitoring data source.

---

Integrate with Multitenant Service Principal

If you're interested in using this approach, contact [e-mail] to request an application hosted in Sedai's Azure account.

1. Create Service Principal: Contact our team to request an Application/Client ID.

2. Role Assignment: Navigate to Access control and create a new role assignment and select Reader for the Job function role. Assign access to User, group, or service principal and click Select members to attach Sedai’s application to the assignment.

3. Share Subscription & Tenant IDs with Sedai Team: Once you have created the new service principal and configured role assignment, copy the Subscription ID and Tenant ID and send them to our team who will complete setup within your Sedai environment.