---
title: "Integration with AZURE"
canonical: "https://kb.cynergy.app/space/GS/989593607/Integration%20with%20AZURE"
format: markdown
---
1. Navigate to [https://my.cynergy.app/authentications](https://my.cynergy.app/authentications)
2. Select ADD AUTHENTICATION

![image](media://a2d0fcec-1c9a-41cb-8c15-5cf30dcc370d)


Select the Authentication type “Azure Keys”

![image](media://4ceb3aad-94f5-4716-876d-8d1812efea2f)


Fill in a custom name and description

![image](media://78a1c447-5d67-4eb6-af72-1d08d9e0e2d0)

##   
Permissions required for registering an app

You must have sufficient permissions to register an application with your Microsoft tenant, and assign to the application a role in your Azure subscription. To complete these tasks, you require `Application.ReadWrite.All`permission.

Now you will need to add the key and the secret:

1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/) as at least a [Cloud Application Administrator](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#cloud-application-administrator).

1. Browse to **Identity** > **Applications** > **App registrations** then select **New registration**.
2. Name the application, for example, "example-app".
3. Select a supported account type, which determines who can use the application.
4. Under **Redirect URI**, select **Web** for the type of application you want to create. Enter the URI where the access token is sent to - **don’t mention a URL**
5. Select **Register**.
  
  Now you can get your **Client ID and Client Secret**

> ℹ️ if you are requested to set up a ruleset you can define Users.Read

6. You've created your Microsoft Entra application and service principal.

## Assign a role to the application

To access resources in your subscription, you must assign a role to the application. Decide which role offers the right permissions for the application. To learn about the available roles, see [Azure built-in roles](https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles).

You can set the scope at the level of the subscription, resource group, or resource. Permissions are inherited to lower levels of scope.

1. Sign in to the [Azure portal](https://portal.azure.com/).
2. Select the level of scope you wish to assign the application to. For example, to assign a role at the subscription scope, search for and select **Subscriptions**. If you don't see the subscription you're looking for, select the **global subscriptions filter**. Make sure the subscription you want is selected for the tenant.
3. Select **Access Control (IAM)**.
4. Select **Add**, then select **Add role assignment**.
5. In the **Role** tab, select the role you wish to assign to the application in the list. For example, to allow the application to execute actions like reboot, start and stop instances, select the **user.read** role.
6. Select the **Next**.
7. On the **Members** tab. Select **Assign access to**, then select **User, group, or service principal**
8. Select **Select members**. By default, Microsoft Entra applications aren't displayed in the available options. To find your application, Search for it by its name.
9. Select the **Select** button, then select **Review + Assign**.

![Screenshot showing role assignment.]()

Your service principal is set up.