Setting up Microsoft Azure for Integration

Overview

This guide has been written to walk you through the steps required to set up your integration with Microsoft Azure.

In this guide you will:

Set up an App Registration
Assign the correct, read-only permissions to the app
Generate a secret key for the app

Setting up the App Registration

Go to the Microsoft Entra Portal and sign in

Click on 'New registration' - you will see a page like the below:


Enter a title - we recommend keeping this simple and easy to identify, for example "OneClickComply Azure Integration"

Ensure that "Accounts in this organizational directory only" is the option selected, then click 'Register'

You will be sent to the app registration page for your new app. Click on "API permissions"


Click on 'add a permission', and then Microsoft Graph, as seen in the screenshot below

11. Select 'Application permissions'

Add the following permissions

- Directory.Read.All
- Policy.Read.All
- UserAuthenticationMethod.Read.All

Click "Add permissions"

Click "Grant admin consent for your organisation name"

Go to Subscriptions - Microsoft Azure

Select the subscription you wish to integrate with OneClickComply

Click "Access control (IAM)" on the left hand menu
Click "Add", then "Add role assignment"
Click on the "Reader" role, then click "Next"



Click on "Select members"
In the menu which appears, type in the name of your app registration

Click on your app registration, then click "Select" at the bottom of the menu

Click "Review + assign", review the information on the page to ensure you have selected the correct role and application, then click "Review + assign" again to assign the role

Go to App registrations - Microsoft Entra admin center and click on your app registration

Click on "Certificates & secrets" in the left hand menu
Click "New client secret"

Enter a description for the secret so that it can be identified by admins (optional)

Select an expiry time, then click "Add"

Copy the contents of the "Value" field associated with your secret, and store this securely, e.g. in a secure note in your password manager of choice
You are now ready to connect OneClickComply to your Azure subscription.

Updated on: 17/04/2025