Configure Azure Resource Manager and access rights for Azure

Log in to the Azure portal using your Azure account:

Select
Azure Active Directory
from the left navigation.
Select the
App registrations
from the left panel on the
Default directory
page.
Select
New Registration
option from
App Registration
pane.
Type in the following information about the
Create
pane:
Name:
Name for the new application. Type in the desired application name. Example: GraphConnectorApp
Redirect URI (optional):
Returns an authentication response after successfully authenticating a user. Example: https://office.com
Select
Register
.
Notes:
The recently created application will be shown.
Edit the manifest file and change the value of the
oauth2AllowImplicitFlow
parameter to
true
after the application is created.
Select
Save
.
Add permissions:
From the Registered App pane, select
API Permissions
.
Select
Add Permission
from the settings pane. Permissions must be set as the image below:
The status for all the permissions will turn green on adding the required permissions, as shown in the screenshot above.
On the
Azure Portal
, go to
Subscriptions
and Select the Subscription.
Select
Access Control (IAM)
on the left side of the panel.
Select the
Add
button of the
Create a Custom Role
section.
Create a
Custom role
and
Add
permissions according to his requirements.
Selects the
resource type
,
resource
, and
Add Permissions
according to his requirement
Selects
Review + Create

Generate secret key

From
Azure Active Directory Admin Centre
, select the created Application from the list of App Registrations and
Create Certificates and Secrets
for the completed Application.
Log into https://aad.portal.azure.com/ and select the created application name.
From the
Settings
pane, he selects the
Keys
option.
From the Keys pane, he types in the
Description
, selects the
Expiration
period and then selects the
Save
button.
From the
Keys
pane, copy the encoded key value and select save. This key value cannot be retrieved after leaving this pane. This encoded key value is the client's Secret Key that will be a part of the authentication credential.
Add the
Created custom role
to the created Application.

Get Tenant ID

From Azure
Active Directory Admin Center
, navigate to the App Registrations pane.
Log into the Azure portal and select the following menu selection:
Azure Active Directory
->
App Registrations
.
From
App Registrations
pane, click
Endpoints
option.
From the
Endpoints
pane, select the copy icon next to the
OAuth 2.0 Token Endpoint
option and
Save
the value.
Copy the value between microsoftonline.com/ and /oauth2/token from the copied endpoint URL. This is the Tenant ID that will be part of the authentication credential. This is the Tenant ID requested in the form described in DevOps Azure Cloud Platform Configuration.

Get the Client ID

From
Azure Active Directory Admin Center
, open the created application.
Select the
Settings
option.
Log into https://aad.portal.azure.com/ and select the created application name.
From the
Settings
pane, copy the
Application ID
value. This is the Client ID that will be part of the authentication credential. This is the Client ID requested in the form described in DevOps Azure Cloud Platform Configuration.

IAM connection prerequisite

Complete configuration on the Cloud Provider console.

Azure Monitor support

Configure Azure Monitor

Navigate to IAM (Click Admin --> IAM).
Click Connection on the left navigation panel.
Click
Add New Connection
from the Add New drop-down menu. The application navigates to the
Add Connection
page.
Select
Technology Category
.
For
Cloud Provider
,
Select Azure Cloud
.
Complete the form.
Click
Test Connection
to test the connection.
Click Add to add the connection when the connection is functioning.

metricbeat.modules: 
  - module: azure
    metricsets:
      - container_insights
    period: 24h
    enabled: true
    continuous: true
    connectionID: "{{connectionID}}"
    queries:
      - name: CPUMemorystats
CPU Query