Azure - SGC setup issue
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
27m ago
Hi All,
Greetings,
I have setup Azure integration in test instance for two test subscriptions and getting all the Azure resources along with other the 9 subscriptions, VMs, Software, Database, Linux server, Windows servers, Resource groups etc.
Issue: I am unable to get VMs Running process and TCP connections and therefor there is no mapping in servicenow between Hosts and its applications running on them.
I have setup extended discovery, and I have followed few community documents which confused me, so If someone has done it and handle this situation then please help me here. I would really grateful to you.
1) Question - Currently setup in test instance and requested Azure team to provide access for 2 test subscription, however when we do the Azure-SGC setup in servicenow production then we need all the resources from all the subscriptions(dev/test/prod), so in this case what request we need to make to Azure team, how they would configure access, so that we can get all the resources.
2) Azure team has uploaded PS and SSH script during extended discovery, however we get below error .
Now do we need Microsoft.Compute/virtualMachines/runCommands/write” access, if yes then on what level we need to provide this role as Its write role so they are not ready to give on tenant level or subscription level but we need to run the command on all the VMs in the azure, so how can we achieve it.
If someone who has worked on it and can provide me the solutions for above queries based on their Azure-SGC implementation, then I would really appreciate the efforts.
Thank you
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11m ago
Hi @ajeetkumar5
A Microsoft.Compute/virtualMachines/runCommands/write ,403 Forbidden error in ServiceNow indicates that the Service Principal or Managed Identity used by the MID Server lacks the necessary permissions to execute commands on the Azure VM. You must assign the Virtual Machine Contributor role or a custom role containing Microsoft.Compute/virtualMachines/runCommands/write to the Service Principal in Azure.
Refer : Servicenow documentation: Azure Turn Off Virtual Machine action
Check this article : Azure Service Graph Connector Version 1.12 - ServiceNow Community
