Assign Reader and Tag Contributor Roles (single subscription)
Manually configure your Azure subscription so that the Client Portal can access your tags and resources.
In some cases, you must configure your Azure subscription manually so that the Client Portal can access the resources and tags.
How does it work?
When you onboard your tenant to the Client Portal, an Enterprise Application called PyraCloud (Azure) is created in your tenant. You must then assign the Tag Contributor and Reader roles to the PyraCloud (Azure) Enterprise Application.
These roles allow the Client Portal to read a list of all the resources in your Azure subscription, and read and write tags on those resources. You can control whether you want the Client Portal to write tags back to resources in your Azure subscription using the Cloud Tenant Setup feature.
Grant access to individual subscriptions
Before granting access, ensure that you've onboarded your tenant.
Follow these steps to grant access:
Launch the Azure Portal and search for Subscriptions.
On the Subscriptions page, choose the subscription you want to integrate with the Client Portal.
Select Access control (IAM).
Select the Role assignments tab.
Click Add > Add role assignment.
Select Reader from the Role menu and then search for Pyra. Choose PyraCloud (Azure) and click Save.
Select Tag Contributor from the Role menu and then search for Pyra. Choose PyraCloud (Azure) and select Save.
The access is granted.
Last updated
