# Integrating Azure to iCompaas

- Source: https://support.icompaas.com/support/solutions/articles/62000230314-integrating-azure-to-icompaas
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Getting Started With iCompaas](https://support.icompaas.com/support/solutions/62000037934) › [Manage Your Cloud Account](https://support.icompaas.com/support/solutions/folders/62000055683)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

To create a service principal with "Reader" permissions for all resources in Azure using the Azure Portal, you can follow these steps:

  

Pre-requisites:

-   Ensure you are signed in to your Azure account using an account with the necessary permissions to create service principals.(Global Administrator)
    
-   Access to iCompaas application
    

  

Integration Process:

-   On Azure portal, navigate to [App Registrations](https://portal.azure.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade)
    
-   Click on the "New registration" button to create a new application registration (service principal).  
    ![](https://support.icompaas.com/assets/kb/14c7052b54ea8948.png)
    
-   Provide a name for your application registration in the "Name" field.
-   Choose the "Supported account types "as Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)”
-   Leave the "Redirect URI" field empty for this scenario.
-   Click the "Register" button to create the application registration.  
    ![](https://support.icompaas.com/assets/kb/cbb7ca1bf36c27aa.png)
-   Copy Application (client) ID and Directory (tenant) ID  
    ![](https://support.icompaas.com/assets/kb/597a4fbc3b3b475a.png)
-   Enter these values on icompaas

  

Client Secret:

-   Click on “Certificates and Secrets”
    
-   Go to Client secret tab, click on “+ New Client secret”
    
-   Add the Description and Expiration
    
-   Click on “Add  
    ![](https://support.icompaas.com/assets/kb/07f0db4fb645d353.png)
    
-   Copy “Value”(Can’t view if exits the page)
-   Enter value to iCompaas  
    ![](https://support.icompaas.com/assets/kb/3038da5446a0e6ac.png)
    
-   Go API permissions
    
-   Click on Add a Permission
    
-   Select ‘Microsoft Graph’  
    ![](https://support.icompaas.com/assets/kb/465d9555418a001e.png)
    
-   Click on ‘Application Permissions’
    
-   Search ‘Directory’ and select ‘Directory.Read.All’
    
-   And click on ‘Add Permissions’  
    ![](https://support.icompaas.com/assets/kb/0f94af68c919746b.png)
    
-   Click on ‘Grant admin consent’ and click Yes on Confirmation pop-up  
    ![](https://support.icompaas.com/assets/kb/7f380442cbb884a5.png)
    
-   Navigate to subscriptions
    
-   Copy the ‘Subscription ID’ and paste it on iCompaas  
    ![](https://support.icompaas.com/assets/kb/71da79dac89530a6.png)  
      
    

-   Go to "Access control (IAM)" in the left-hand menu:
    
-   Click on ‘+ Add’ and then "Add role assignment" button.  
    ![](https://support.icompaas.com/assets/kb/31d6780619dd527c.png)
    
-   In the "Add role assignment" pane
    
-   Serarch for  "Reader" role and click to select.  
    ![](https://support.icompaas.com/assets/kb/c64bcf1a9c4832b7.png)
    
-   Go to ‘Members’ tab o top
    
-   In the "Assign access to" section, select "Azure AD user, group, or service principal."
    
-   In the "Select" field, start typing the name of the application registration you created earlier. It should appear in the dropdown.
    
-   Click on that application and select  
    ![](https://support.icompaas.com/assets/kb/44f97fe3c34cb490.png)
    
-   Click on Review + assign to assign the permissions

  

**Special Note:** **Congratulations! You have completed the prerequisite steps to add your cloud account. Please click the “Next” button below to finish the setup.**