Adding permissions for subscriptions

Anodot needs Monitoring Reader permission to analyze the usage up to the resource level to provide recommendations to optimize costs. In this article, we explain how to add permission to each subscription and associate it with the existing application.
 
There are two options:
  1. Providing permissions per subscription.
  2. Providing permissions for multiple subscriptions at once (Management group level).

Connecting a subscription:

  1. Go to the Azure Portal: https://portal.azure.com/
  2. Access the Subscriptions service.

    undefined

  3. In the left navigation panel, click Access Control (IAM).
  4. Add a new role by clicking Add.

    azure-iam-access.png
  5. In the Add role assignment screen, search for the Monitoring Reader role and add it.

    azure-add-role.png
  6. Under the Members tab, click on Select Members, search for the application name you created for Anodot during the onboarding, choose it, and click on Review + assign.



  7. Save the role you just created


Connecting multiple subscriptions at once:

  1. Go to the Azure Portal: https://portal.azure.com/
  2. Navigate to Management Group



  3. Click on your Management Group
  4. In the left navigation panel, click Access Control (IAM).
  5. Add a new role by clicking Add.
  6. In the Add role assignment screen, search for the Monitoring Reader role and add it.
  7. Under the Members tab, click on Select Members, search for the application name you created for Anodot during the onboarding, choose it, and click on Review + assign.
  8. Save the role you just created.


You will see all your subscriptions connected to Anodot under the Accounts > Subscriptions page after the invoice runs (automatically every day). Moreover, you will see new recommendations under the Recommendations page after the invoice run.