Onboarding: EA accounts

The Azure onboarding process for EA accounts consists of two main parts:

1. Managing your API keys to enable API data access
2. Connect your Azure account in the Anodot app
3. Create an application in Anodot

Part 1 : Managing your API keys to enable API data access

IMPORTANT: Only users with the Owners role can perform the following steps in the Azure portal to enable API data access.

1. Navigate to the Azure portal and log in.

2. Navigate to Cost Management + Billing.

3. Click on Billing scopes from the navigation menu and then select the billing account that you want to work with.

4. Click on Usage + Charges from the navigation menu.

5. Click Manage API Access Keys to open the Manage API Access Keys dialog.
   
   
   
   * Image sourced from the learn.microsoft.com knowledge base.
   
   In this dialog, you'll do the following:

   • Generate and view primary and secondary access keys.

   • View start and end dates for access keys (see the screenshots in the following procedures).

   • Revoke and regenerate access keys.

Generate and view primary and secondary access keys

1. Sign in to the Azure portal as an Enterprise administrator.

2. Navigate to Cost Management + Billing.

3. Navigate to Billing scopes from the navigation menu and then select the billing account that you want to work with.

4. In the navigation menu, select Usage + Charges.

5. Click Manage API Access Keys and then click Generate to generate the key.

6. Click the expand symbol and then click Copy to get the API access key for immediate use.
   
   
   
   * Image sourced from the learn.microsoft.com knowledge base.

Revoke and regenerate access keys

1. Repeat steps 1 - 5 in Generate and view primary and secondary access keys.

2. To revoke a key, click the expand symbol and then click Revoke.

3. To regenerate a key, click the expand symbol and then click Regenerate.

Allow API access to non-administrators

If you want to give the API access keys to people who aren't enterprise administrators in your enrollment, perform the following steps. The steps below give API access to key-holders so they can view cost and pricing information in usage reports.

1. Sign in to the Azure portal.

2. Navigate to Cost Management + Billing.

3. Click Policies from the navigation menu.

4. Select On under the DEPARTMENT ADMINS CAN VIEW CHARGES section and then click Save.

5. Select On under the ACCOUNT OWNERS CAN VIEW CHARGES section and then click  Save.
   
   
   
   * Image sourced from the learn.microsoft.com knowledge base.

Retrieving the enrollment ID from the Azure portal

Note that the enrollment ID is a unique identifier for your Azure Enterprise Agreement (EA) enrollment. It is required for accessing Azure Cost Management and other EA-related services.

1. Sign in to the Azure Enterprise portal.

2. Click on Manage from the navigation menu.

3. Click the Enrollment tab, and then locate the "Enrollment Number" in the list of enrollment details.

4. Copy the "Enrollment Number" to retrieve the enrollment ID.

Alternatively, you can also find the enrollment ID by following these steps:

1. Sign in to the Azure portal.

2. Navigate to Azure Active Directory.

3. In the refreshed left navigation menu, click App Registrations. Then click All Applications.

4. Locate the application named "Microsoft Azure Enterprise".

5. Click on the application to view its details. The enrollment ID is listed under the Properties section.

Pass-keys in the API

You need to pass the API key for each call for authentication and authorization. Pass the following property to HTTP headers:

This procedure describes how to provide Anodot with the relevant information to establish a secure connection.

1. Login to Anodot Cloud Cost.
2. Click on your user email and navigate to the Account page.
   
   
   
   
3. On the account menu navigate to the Cloud Account page and click on the Microsoft Azure icon
   
   
   
   
4. Read the first page and click Let's Start.
   
   
   
5. Select EA, and then click Next.
   
   
   
   
6. Enter the following values that you located in Part 1.
   
   
   
   
7. Click Save.
   
   After completing this step, you will be able to see your data in Anodot within 24 hours.

Part 3 : Create an application in Anodot

The following steps will allow Anodot to receive data at the resource level and provide you with recommendations:

Azure side

1. Navigate to Azure Active Directory > App Registrations

2. Click on "Microsoft Azure Enterprise"

3. Copy the values of “Directory ID” + “Application ID” - you will need to insert them later when integrating with Anodot

4. Navigate to Certificates & Secrets and then click on New Client Secret

5. When creating the new client secret, select the Expires = 730 days option

6. Navigate to Certificates & Secrets and copy the Value of the client secret you just created and save it to one side - you will need to insert it later when integrating with Anodot

Anodot side

1. Login to Anodot Cloud Cost
2. Click on your user email and navigate to the Account page
   
   
   
   
3. From the account menu, navigate to the App Registration page and click on REGISTER A NEW APPLICATION
   
   
   
   
4. Enter all the values you saved from the previous explanation, and click Save