Add an Azure service account

During Cloud Provisioning Day 1 setup, you added one service account to the cloud account. To compartmentalize your infrastructure or to include different datacenters, you can add another service account. A particular datacenter, however, cannot be selected in more than one service account in a cloud account.

Avant de commencer

Role required: sn_cmp.cloud_admin

Procédure

1. Open the Azure-Credentials.txt text file that you created during the Create a Microsoft Azure service principal procedure.
2. Navigate to Cloud Admin Portal > Manage > Service Accounts.
3. Click New, enter a unique and meaningful Name, and then fill in the form.

   

   Field	Description
   Account ID	The Azure Subscription ID value that you copied from the Azure Portal into the text file. See Discovery for Microsoft Azure to learn Management Groups subscription IDs.
   Discovery credentials	Name of the credentials that you created in the Store the Azure service principal credentials in the instance procedure. In the example, you used the name Azure service principal credentials.
   Datacenter URL	URL of the datacenter. This field is required only for the government and regional accounts. Discovery and Service Mapping Patterns supports the US, Germany, and China Microsoft Azure government clouds.
   Datacenter type	Select Azure Datacenter.
   Datacenter discovery status	Auto-generated value: Status and timestamp of the last execution of Discovery on the datacenter.
   Should pull events	Option to enable the ServiceNow AI Platform® to collect resource change information from the Microsoft Azure cloud. The ServiceNow AI Platform® uses the resource change information to update the Configuration Management Database (CMDB). For more information on the supported Azure resource types, see Azure change processing. If you select the Should pull events check box for a management group, the ServiceNow AI Platform enables Azure change processing for all the subscriptions in the management group.

4. Click Update or Submit.
   The system creates the service account and displays the list of all discovered datacenters.

Que faire ensuite

After you complete all procedures in this initial "Day 1" setup, you can create additional cloud accounts and service accounts to organize and compartmentalize your cloud infrastructure.

Remarque :

If you are on a domain separated instance, only those events that are updated to the CMDB and belong to your domain are visible. Events create configuration items (CI) in the same domain as the cloud service account they are mapped to.

Concepts associés

• Discovery for Microsoft Azure