> For the complete documentation index, see [llms.txt](https://documentation.ardoq.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.ardoq.com/integrations/out-of-the-box-integrations/azure.md).

# Azure

Learn how to configure your Azure instance and import its data into Ardoq.

## Overview <a href="#h_accfdf095c" id="h_accfdf095c"></a>

The Azure Resources integration — built on the Microsoft Graph API — connects to your Azure tenant to bring in Azure resources into Ardoq as components and references.

It has support for the majority of commonly-used Azure resources. If you find that you have resources that are not supported out of the box, reach out to Ardoq Customer Support.

## Setting Up — Microsoft Azure <a href="#h_9966020785" id="h_9966020785"></a>

Before Ardoq can import data from Azure, it requires configuring permissions in your Azure instance.

{% stepper %}
{% step %}

### Application Configuration

1. Add the [Ardoq application](https://azuremarketplace.microsoft.com/en/marketplace/apps/aad.ardoq?tab=Overview) to your Azure tenant
2. Go to **Enterprise applications**, select the Ardoq application you added, and copy its **Application ID**

<figure><img src="https://2484004798-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnlnB7uZ29iLVLzqGbCym%2Fuploads%2FkNsZUeEVcvnSx43SMVA0%2Fimage.png?alt=media&amp;token=53f48c2a-0b61-43f7-ac2f-1aa37511baf0" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

### PowerShell Configuration

1. Open PowerShell and log in with the `az login` command
2. Assign a role for the Ardoq application with the scope you want for permissions:
   1. For example, if you want to grant the **Reader** role permission for your subscription, use the following command:

      `az role assignment create --assignee <your_application_id> --role Reader --scope /subscriptions/<your_subscription_id>`
   2. If you want to use multiple subscriptions, you will need to execute the above command for each subscription ID.
      {% endstep %}
      {% endstepper %}

## Setting Up — Ardoq <a href="#h_50c164b75d" id="h_50c164b75d"></a>

1. Go to the main menu and select **Imports & Integrations**
2. Select **Azure Resources**
3. Go to the **Connections** tab and click **Create new connection**
4. Fill in your connection credentials based on your Microsoft Azure details
5. Click **Create connection** to finalize the configuration

### Selecting Resouces

This integration is focused on selecting Azure resources as the primary integrations pivot. Each resource brought into the Ardoq import process will have a Subscription ID, Resource Group ID, and Location, allowing you to filter the same resource types across different locations and subscriptions.

#### Automatic Addition and Deletion of Resources <a href="#h_3bd8be2b26" id="h_3bd8be2b26"></a>

When creating a scheduled integration, your resources will be updated in Ardoq as changes happen in Azure. That is, when a resource is added or deleted — with the Delete missing assets strategy enabled — in Azure, the next synchronization with Ardoq will add or remove the resource from the relevant Ardoq workspace.

### Using Tags <a href="#h_4c31f02ac7" id="h_4c31f02ac7"></a>

The Azure Resources importer has two tag strategies for tags in Azure. A tag is a key-value pair in Azure. For example, the tag `team: finance` has the tag `team` and the tag value `finance`.

#### Tags as Tables <a href="#h_47e2a8f53c" id="h_47e2a8f53c"></a>

By default, all resources have a column called Tag Value IDs that contains a comma-separated list of IDs that correspond to the Tag Value IDs found in the Tag Values table. The Tag Values table further connects to the Tags table based on matching Tag IDs.

<figure><img src="https://2484004798-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnlnB7uZ29iLVLzqGbCym%2Fuploads%2FjLBeAz5dSVt4PRFUyFI0%2Fimage.png?alt=media&amp;token=8c80d740-8564-42c5-9408-e9981b09c525" alt=""><figcaption></figcaption></figure>

To use this approach make sure you select the Tags and Tag Values tables when selecting your resources. Our recommended reference structure for the three different tables are as follows:

<figure><img src="https://2484004798-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnlnB7uZ29iLVLzqGbCym%2Fuploads%2F9WNQNZukQr1fb7gp6ADo%2Fimage.png?alt=media&amp;token=d700058d-8672-401e-8f17-fc7d56a2a19c" alt=""><figcaption></figcaption></figure>

#### Tags as Columns <a href="#h_940cf6fb62" id="h_940cf6fb62"></a>

In this approach, the each Tag on a resource will be brought in as its own column and the values in the column will represent the tag value for that resource. This is a simpler mapping for reporting, but loses power in visualization.

<figure><img src="https://2484004798-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnlnB7uZ29iLVLzqGbCym%2Fuploads%2FftY7Km453hdy3RY8M02Q%2Fimage.png?alt=media&amp;token=00ea0d9a-e621-43b9-9d51-beb912a42660" alt=""><figcaption></figcaption></figure>

**Note**: This option will need to be enabled per resource using the **Settings** button in the **Select data** step of the import.

<figure><img src="https://2484004798-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnlnB7uZ29iLVLzqGbCym%2Fuploads%2FJq0jn8qMB1OboCbIN03O%2Fimage.png?alt=media&amp;token=8077dc4d-4355-44c4-8b30-3fa383640228" alt=""><figcaption></figcaption></figure>

## Mapping Azure Resources to Ardoq <a href="#h_57477de114" id="h_57477de114"></a>

We recommend reading through our [article](https://www.goo123123.com) on mapping Azure resources into Ardoq components and references.

## Supported Resources​ <a href="#h_33abe83935" id="h_33abe83935"></a>

Ardoq has support for the following Azure resources:

<details>

<summary>Supported Azure Resources</summary>

Activity Log Alerts | microsoft.insights/activitylogalerts\
Analysis Services Servers | microsoft.analysisservices/servers\
API Management Services | microsoft.apimanagement/service\
App Insights | microsoft.insights/components\
Application Gateways | microsoft.network/applicationgateways\
App Service Plans | microsoft.web/serverfarms\
App Services (Web Sites) | microsoft.web/sites\
Availability Sets | microsoft.compute/availabilitysets\
AVS Private Clouds | microsoft.avs/privateclouds\
Azure DevOps Organizations | microsoft.visualstudio/account\
Bastion Hosts | microsoft.network/bastionhosts\
CDN Profiles | microsoft.cdn/profiles\
Cognitive Services Accounts | microsoft.cognitiveservices/accounts\
Container Apps | microsoft.app/containerapps\
Container Instances | microsoft.containerinstance/containergroups\
Container Registries | microsoft.containerregistry/registries\
Cosmos DB Accounts | microsoft.documentdb/databaseaccounts\
Databricks Workspaces | microsoft.databricks/workspaces\
Data Factories | microsoft.datafactory/factories\
Disk Encryption Sets | microsoft.compute/diskencryptionsets\
Disks | microsoft.compute/disks\
DNS Zones | microsoft.network/dnszones\
Event Hub Clusters | microsoft.eventhub/clusters\
Event Hub Namespaces | microsoft.eventhub/namespaces\
ExpressRoute Circuits | microsoft.network/expressroutecircuits\
Fabric Capacities | microsoft.fabric/capacities\
Firewalls | microsoft.network/azurefirewalls\
Front Doors | microsoft.network/frontdoors\
Healthcare Analytics Connectors | microsoft.healthcareapis/workspaces/analyticsconnectors\
Healthcare DICOM Services | microsoft.healthcareapis/workspaces/dicomservices\
Healthcare FHIR Services | microsoft.healthcareapis/workspaces/fhirservices\
Healthcare IoT Connectors | microsoft.healthcareapis/workspaces/iotconnectors\
Healthcare Services | microsoft.healthcareapis/services\
Healthcare Workspaces | microsoft.healthcareapis/workspaces\
Hybrid Machine Extensions | microsoft.hybridcompute/machines/extensions\
Hybrid Machines | microsoft.hybridcompute/machines\
Hybrid Private Link Scopes | microsoft.hybridcompute/privatelinkscopes\
Key Vaults | microsoft.keyvault/vaults\
Load Balancers | microsoft.network/loadbalancers\
Locations | custom fetcher\
Logic Apps | microsoft.logic/workflows\
Maintenance Configurations | microsoft.maintenance/maintenanceconfigurations\
Managed Clusters | microsoft.containerservice/managedclusters\
Container App Environments | microsoft.app/managedenvironments\
Management Groups | custom fetcher\
MariaDB Servers | microsoft.dbformariadb/servers\
Metric Alerts | microsoft.insights/metricalerts\
MySQL Flexible Servers | microsoft.dbformysql/flexibleservers\
MySQL Servers | microsoft.dbformysql/servers\
Network Gateways | microsoft.network/virtualnetworkgateways\
Portal Dashboards | microsoft.portal/dashboards\
PostgreSQL Flexible Servers | microsoft.dbforpostgresql/flexibleservers\
PostgreSQL Server Groups V2 | microsoft.dbforpostgresql/servergroupsv2\
PostgreSQL Servers | microsoft.dbforpostgresql/servers\
Power BI Capacities | microsoft.powerbidedicated/capacities\
Private Endpoints | microsoft.network/privateendpoints\
Public IP Addresses | microsoft.network/publicipaddresses\
Purview Accounts | microsoft.purview/accounts\
Redis Cache | microsoft.cache/redis\
Relay Namespaces | microsoft.relay/namespaces\
Resource Groups | microsoft.resources/subscriptions/resourcegroups\
Scheduled Query Rules | microsoft.insights/scheduledqueryrules\
Service Bus Namespaces | microsoft.servicebus/namespaces\
Service Fabric Clusters | microsoft.servicefabric/clusters\
Service Group Members | microsoft.relationships/servicegroupmember\
Service Groups | microsoft.management/servicegroups\
SQL Databases | microsoft.sql/servers/databases\
SQL Elastic Pools | microsoft.sql/servers/elasticpools\
SQL Instance Pools | microsoft.sql/instancepools\
SQL Managed Databases | microsoft.sql/managedinstances/databases\
SQL Managed Instances | microsoft.sql/managedinstances\
SQL Servers | microsoft.sql/servers\
SQL Virtual Clusters | microsoft.sql/virtualclusters\
SQL Virtual Machines | microsoft.sqlvirtualmachine/sqlvirtualmachines\
Storage Accounts | microsoft.storage/storageaccounts\
Stream Analytics Jobs | microsoft.streamanalytics/streamingjobs\
Subnets | child of microsoft.network/virtualnetworks\
Subscriptions | microsoft.resources/subscriptions\
Synapse Big Data Pools | microsoft.synapse/workspaces/bigdatapools\
Synapse Private Link Hubs | microsoft.synapse/privatelinkhubs\
Synapse SQL Pools | microsoft.synapse/workspaces/sqlpools\
Synapse Workspaces | microsoft.synapse/workspaces\
Tags | custom fetcher\
Tag Values | custom fetcher\
User Assigned Identities | microsoft.managedidentity/userassignedidentities\
Virtual Machines | microsoft.compute/virtualmachines\
Virtual Machine Scale Sets | microsoft.compute/virtualmachinescalesets\
Virtual Networks | microsoft.network/virtualnetworks\
Virtual WANs | microsoft.network/virtualwans

</details>