Service Principal Management

Introduction

The first step in getting started with Cost Analyzer in Turbo360 is to add a Service Principal with reader access.

Service Principal is an application within Azure Active Directory, which is authorized to access resources in Azure Stack.

Turbo360 uses the authentication tokens of the Service Principal to manage the resources.

Client secret expiry

• Turbo360 allows users to configure the same date as the Azure portal to notify users 7 days before the expiration date to change the Client secret.

• Users can change the Client secret expiry date when adding or editing a Service Principal during Service Principal management.

Add a Service Principal

1. Navigate to Service principals section and click Add.
2. Users can reuse any existing Service Principal or add a new one by clicking the available checkbox.
3. Provide a name and Subscription information such as Tenant id, Client id, and Client secret expiration date.

4. Click Validate.
5. Upon successful validation, click Next.
6. The next step involves providing access to the Cost Management group. Users can opt to enable the subscription checkbox to provide complete access to the resource groups within it or enable the subscription checkbox and assign a specific resource group for limited access to the Cost Management group.

7. Next within Select scope, users can define the scope for the chosen subscription by selecting filters such as resource types, tags, and more.

9. Choose the Cost Management group to grant access to the selected subscriptions.

By checking the subscription checkbox and clicking Bulk selection, it is possible to grant access for multiple subscriptions to similar cost management groups at once.

8. Click Add.

Update a Service Principal

1. Click Edit icon next to any available Service Principal in Service principals section.
2. The client secret and secret expiration date can be modified.
3. Click Validate.
4. Click Next upon successful validation.
5. The Access Policy of Cost management groups can be updated.

7. Click Update.

Remove a Service Principal

1. Click Delete icon next to the desired Service Principal in Service principals section
2. Click Delete in the confirmation box