{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":31604,"path":"it-operations-management/setup-azure-service-accounts.md","title":"Set up Azure service accounts","bundle":null,"doc_type":null,"release":"australia","body":"\n# Set up Azure service accounts\n\nCreate and configure cloud service accounts at ServiceNow AI Platform for the corresponding Microsoft Azure accounts.\n\n## Verify the REST API permissions\n\nDownload the [Cloud Discovery patterns spreadsheet](https://downloads.docs.servicenow.com/resource/enus/api/servicenow-discovery-patterns-api-details.xlsx) so you can grant user permissions required for running the Discovery patterns. In addition to permissions, the spreadsheet also includes useful information such as pattern names, types, CI Classes, and links to vendor documentation. New patterns are available quarterly, so check periodically to be sure you have the latest version of the spreadsheet.\n\n## Before you begin\n\n-   **Ensure the configuration of Azure credentials**\n\n    For more information, see [Create Azure cloud credentials](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/create-azure-cloud-credentials.md) and [Configuration steps for Azure Service Principal User and Credentials \\(KB2202765\\)](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB2202765)\n\n-   **Ensure that you are familiar with the hierarchy of the Azure service accounts in your environment.**\n\n    Set up the service accounts at ServiceNow AI Platform to reflect the hierarchy of your environment. You can set up the Azure service accounts for the following Azure account types:\n\n    -   Management group.\n    -   Subscription.\n\nRole required: discovery\\_admin\n\n## About this task\n\nA service account is a secure record on your instance that stores the credentials and access information for your provider account. Discovery uses the information to access your provider account to get data on each resource in each specified datacenter. A cloud account is the logical representation in cloud management of all or part of your managed cloud infrastructure. A cloud account can include multiple service accounts—even service accounts from different providers. For each service account, you specify which datacenter to include in the cloud account.\n\n## Procedure\n\n1.  In the navigation filter, enter `cmdb_ci_cloud_service_account.list`.\n\n2.  Select **New**.\n\n3.  Fill in the fields by the following order:\n\n    1.  Select the datacenter.\n    2.  Select the check box of the **Is management account** if your are creating a service account for a management group.\n    3.  Select **Should pull events** to preform event-based discovery. For more information, see [Microsoft Azure Alert driven discovery](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/microsoft-azure-alert-driven-discovery.md)\n<table id=\"table-azure-service-acct-form\"><thead><tr><th>\n\nField\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nName\n\n</td><td>\n\nThe unique and meaningful name for this service account.\n\n</td></tr><tr><td>\n\nAccount ID\n\n</td><td>\n\nIf you are creating a service account for a management group, fill in the Azure management group ID that belongs to the management group. If you are creating a service account for a subscription, fill in the Azure subscription ID.\n\n</td></tr><tr><td>\n\nDiscovery credentials\n\n</td><td>\n\nThe credentials needed for ServiceNow applications to access this account.\n\n</td></tr><tr><td>\n\nDatacenter URL\n\n</td><td>\n\nURL of the datacenter.\n\n Configuring this field is required for Azure Gov Cloud \\(US\\) accounts. For example, [https://management.usgovcloudapi.net/.](https://management.usgovcloudapi.net/.)\n\n</td></tr><tr><td>\n\nDatacenter type\n\n</td><td>\n\nType of the datacenter where the account is hosted.Select **Azure datacenter**.\n\n</td></tr><tr><td>\n\nDatacenter discovery status\n\n</td><td>\n\nAuto-generated value: Status and timestamp of the last execution of discovery on the datacenter.\n\n</td></tr><tr><td>\n\nParent account\n\n</td><td>\n\nWhen setting up a service account for an Azure subscription, fill in the management group ID.\n\n When the **Is management account** check box is selected, the **Parent account** field is not applicable\n\n</td></tr><tr><td>\n\nAccessor account\n\n</td><td>\n\nNot applicable for Azure service accounts.\n\n</td></tr></tbody>\n</table>4.  Select **Submit**.\n\n\n**Parent Topic:**[Set up a cloud service account](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/setup-cloud-service-account.md)\n\n**Related topics**  \n\n\n[Discovery for Microsoft Azure](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/azure-cloud-discovery.md)\n\n"}}