Azure integration

Integrate Azure with Chronom: prerequisites, App Registration + service principal permissions (subscription vs. management group), ingested data scope, least‑privilege guidance, and permission validation / troubleshooting before continuous scanning.

📄️ Introduction

For Microsoft 365 license optimization, see the M365 Integration section. M365 uses the same App Registration mechanism with additional Graph API permissions.

📄️ Create a New Azure App Registration

This guide should only be performed once per Azure Tenant.

📄️ Grant Root Management Group Permissions

This guide is to be performed once per Azure Tenant.

📄️ Grant Single Subscription Permissions

This guide is to be performed once per Azure Subscription.