Azure Resource Manager configuration

learn how to configure for the integration of azure resource manager to broaden the observability of your hybrid it estate access rights for azure the account should have registration of the application of that particular subscription and have at least the read access/role for that purpose, a new key should be created then, the client secret key, client id and tenant id are used to create/configure an account in to pull data from azure cloud use the following procedure to create a client secret key respective application account for azure cloud log in to the azure portal using your azure account select azure active directory from the left navigation select the app registrations from the left panel on the default directory page select the new registration option from the app registration pane type in the following information regarding the create pane field description sample name name for the new application type in the desired application name graphconnectorapp redirect uri (optional) returns an authentication response after successfully authenticating a user https //office com https //office com select register the recently created application will be shown edit the manifest file and change the value of the oauth2allowimplicitflow parameter to true after the application is created select save add permissions note the status for all permissions will turn green on adding the required permissions select the add button of the create a custom role section create a custom role and add permissions according to his requirements selects the resource type , resource and add permissions according to his requirements selects review+create generate secret key use the following procedure to generate a secret key from azure active directory admin centre , select the created application from the list of app registrations and create certificates and secrets for the completed application log in to the azure portal and select the created application name from the settings pane, he selects the keys option from the keys pane, he types in the description , selects the expiration period and then selects the save button from the keys pane, copy the encoded key value, and select save this key value cannot be retrieved after leaving this pane this encoded key value is the client's secret key that will be a part of the authentication credential add the created custom role to the created application get tenant id use the following procedure to acquire the tenant id from azure active directory admin center , navigate to the app registrations pane log in to the azure portal and select the following menu selection azure active directory → app registrations from app registrations pane, click endpoints option from the endpoints pane, select the copy icon next to the oauth 2 0 token endpoint option and save the value copy the value between microsoftonline com/ and /oauth2/token from the copied endpoint url this is the tenant id that is part of the authentication credential get the client id use the following procedure to acquire the client id from azure active directory admin center , open the created application select the settings option log in to the azure portal and select the created application name from the settings pane, copy the application id value this is the client id that will be part of the authentication credential kyndryl connection from kyndryl applications' landing page, select the main menu or the manage tile select admin and then, click on the screen, select the connections tab from the left panel select the add new drop down menu select the add a connection select the technology category as cloud provider select azure cloud enter the account number , access key id , and access secret key from the azure account referred to in the previous section validate your credentials by selecting test connection once the connection is successful, select add to create a connection note even though it is shown as optional in the picture above, the "subscriptionid" column, along with the other obligatory values, is required to bring data for azure clusters