Connecting to Azure

Connections are how CloudZero manages the Cost Sources that bring Billing, Resources, and other types of data into the platform.

How the Azure Connection Works

Connecting CloudZero to an Azure account shows Azure cost data alongside other Cost Sources in the Explorer and enables anomaly alerts on Azure spend.

Depending on the Azure account type and billing scope, this includes the following data:

  • Daily and monthly usage data
  • Billing data
  • Data from invoices and balances, including taxes and discounts applied

You connect CloudZero to Azure by enabling the CloudZero multi-tenant service principal in your tenant and granting it read-only access to the Azure Cost Management + Billing APIs.

📘

All of CloudZero's Azure Permissions are Read-Only

CloudZero has no access to read data except where explicitly authorized. For example, the Billing Reader role grants CloudZero permission to read usage and billing data for a specific subscription, but not to query resource configurations.

How to Connect to Supported Azure Agreement Types

Microsoft Azure accounts can have different agreement types that affect how usage and billing data can be collected.

To get started with an Azure connection, select your agreement type from the following list:

Accounts obtained through other agreements, such as the Microsoft Online Services Program or other MSDN-based agreements, do not support exporting usage data and cannot be connected to CloudZero.

To check which agreement type you have, see the Azure documentation.