# Assign Reader and Tag Contributor Roles (single subscription)
In some cases, you must configure your Azure subscription manually so that the Client Portal can access the resources and tags.
When you onboard your tenant to the Client Portal, an Enterprise Application called SoftwareOne Cloud Consumption (formerly PyraCloud Azure) is created in your tenant. You must then assign the [Tag Contributor](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#tag-contributor) and [Reader](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#reader) roles to the PyraCloud (Azure) Enterprise Application.
These roles allow the Client Portal to read a list of all the resources in your Azure subscription, and read and write tags on those resources. You can control whether you want the Client Portal to write tags back to resources in your Azure subscription using the Cloud Tenant Setup feature.
## Grant access to individual subscriptions
{% hint style="info" %}
Before granting access, ensure that you've [onboarded your tenant](https://docs.platform.softwareone.com/extensions/cloud-tools/cloud-tenant-setup/azure-onboarding/activate-an-azure-ea-or-mpsa-account).
{% endhint %}
To grant access to individual subscriptions:
1. In the [Azure Portal](https://portal.azure.com/#home), search for **Subscriptions**.
2. On the **Subscriptions** page, choose the subscription you want to integrate with the Client Portal.
3. Select **Access control (IAM).**
4. Select the **Role assignments** tab.
5. Select **Add** > **Add role assignment**.
6. Select **Reader** from the **Role** menu. Then, search for **SoftwareOne Cloud Consumption** (formerly PyraCloud Azure) and select it from the search results. Click **Save**.
7. Select **Tag Contributor** from the **Role** menu. Then, search for **SoftwareOne Cloud Consumption** (formerly PyraCloud Azure) and select it from the search results. Click **Save**.
Access is granted.
