This article provides guidance on how to obtain the following required parameters when you register the Microsoft Azure account in ePolicy Orchestrator:

• Subscription id
• Tenant id
• Client id

IMPORTANT: Make sure that the Azure Resource Manager (RM) modules are installed in Microsoft Azure PowerShell.

Run the Microsoft Azure PowerShell script. The script obtains the required parameters to use when registering the Azure account on ePO:

1. Download the required script attached to this article, and copy it to the PowerShell installation folder.
   
   NOTE: Make sure that you download the correct script according to the version of the cloud connector in use:
   
   MicrosoftAzure_Prerequisite_CWS50_Ver3.zip (for CWS 5.x users)
    
2. Open the PowerShell as administrator.
3. To change directory type the following command, and then press Enter:
   
   cd "PowerShell directory path"
    
4. To run the script type the following command, and then press Enter:
   
   .\MicrosoftAzure_Prerequisite.ps1
    
   This script requests the following parameters to be entered during execution:
   • The name of your application. For example: CompanyApp.
   • URL to a page that describes your application. This link is not verified. For example: https://www.companyapp.com.
   • URLs that identify your application. For example: https://www.companyapp.com/example.
   • Password for your application.
   • For CWS 5.0 only, select one option for Limited Role privilege creation, in the numeric format 1 or 2:

Single Subscription
For a single subscription linked to a logged on user:

• McAfee CWS Basic – This set of rules grants only a limited privilege user permission to Discover Azure Instances and NSG rules.
• McAfee CWS Advanced – This set of rules grants a user the permission to:
  • Discover Azure Instances and NSG rules, with Traffic discovery
  • Remediate NSG rules
  • Shut down Instance

1. If multiple subscriptions are associated with the user account, follow the steps in either Option A or Option B:

1. Select a number that corresponds to the subscription, when prompted by the script.
2. After you select the number, follow the same steps in the Single Subscription section above.

1. Select All when prompted.
2. Type a prefix string to prepend to the web application name.

3. To use for all web applications, type a password.

2. For CWS 5.0 only, select one of the following options for a Limited Role privilege creation, in the numeric format 1 or 2:
   • McAfee CWS Basic - This set of rules grants only a limited privilege user permission to Discover Azure Instances and NSG rules.
   • McAfee CWS Advanced - This set of rules grants a user permission to:
     • Discover Azure Instances and NSG rules, with Traffic discovery
     • Remediate NSG rules
     • Shut down Instance

• Subscription id
• Tenant id
• Client id

Internally, this script will:

• Create a new Active Directory application.
• Create a service principal for the application.
• Grant the service principal permissions on your subscription, as a Contributor.
  
  NOTE: For multiple subscriptions in an Azure account, you can select the required subscription when the PowerShell script runs.