--- sourceDocument: Australia IT Operations Management sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # Azure sub account # Azure sub account pattern-based discovery {#ariaid-title1} Release version: Australia Updated June 18, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Azure sub account pattern-based discovery The Azure sub account pattern-based discovery in ServiceNow enables discovery and mapping of Azure subscriptions, management groups, and related cloud resources within your cloud environment. This functionality is part of the Discovery and Service Mapping Patterns application and requires the latest version from the ServiceNow Store for full capabilities. Show full answer Show less This discovery process supports both standard Azure subscriptions and Azure GovCloud (US) environments, with specific configuration needed for GovCloud accounts. ## Key Features * **Azure Management Groups Data Model:** Introduces a new CI class `cmdbciazuremanagementgroup` extending the base Configuration Item class for managing Azure Management Group data. * **Discovery Data Collection:** The Azure - Sub Account (LP) pattern populates critical subscription and service account data into the CMDB, including subscription IDs, datacenter types and URLs, operational status, lifecycle stages, and relationships to parent accounts and credentials. * **Management Group Discovery:** Collects management group names, IDs, parent group relationships, and operational/install status details to represent Azure management group hierarchies. * **Cloud Organizations:** Captures tenant-level details such as tenant ID, name, and DNS domain when using tenant-level credentials. * **CI Relationships and References:** Establishes references and hierarchical relationships between Cloud Service Accounts, Azure Management Groups, and Cloud Organizations to accurately model Azure environments in the CMDB. * **Azure Tag Discovery:** Gathers Azure resource tags and stores them as key-value pairs linked to the relevant Cloud Service Account CIs for enhanced metadata management. ## Practical Application for ServiceNow Customers By implementing this pattern-based discovery, ServiceNow customers can achieve comprehensive visibility into their Azure cloud subscriptions and management groups within the CMDB. This enables better cloud governance, operational insight, and lifecycle management through automatic population of subscription statuses, lifecycle stages, and hierarchical relationships. Customers should ensure Microsoft Azure discovery prerequisites are met and configure discovery schedules appropriately, especially for Azure GovCloud environments. The discovery process supports continuous updating of subscription and management group data, allowing IT teams to maintain accurate and actionable cloud asset records that facilitate compliance, cost management, and service mapping. Discovery and Service Mapping Patterns finds Azure subscriptions and management groups on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store. ## Azure Management Groups data model {#azure-sub-account-pattern__section_data_model} The Azure Management Groups pattern extension introduces the following CI class that extends an existing CMDB class. {#azure-sub-account-pattern__table_data_model__entry__2} | CI class | Extends from | |-|-| | Azure Management Group \[cmdb_ci_azure_management_group\] | Configuration Item \[cmdb_ci\] | [Table 1. CI class introduced by the Azure Management Groups pattern extension] {#azure-sub-account-pattern__table_data_model} ## Pattern-based discovery and mapping requirements {#azure-sub-account-pattern__section_rpj_fj2_bgc} Verify the Microsoft Azure discovery prerequisites : For more information, see the prerequisites section in [Microsoft Azure Cloud discovery using patterns](https://www.servicenow.com/docs/e2521~KHAw8EO7j1nC9QMA "Discovery uses multiple patterns to discover components of the Microsoft Azure Cloud deployment during horizontal discovery. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store."). Configure the Discovery schedule to support GovCloud : Discovering Azure GovCloud (US) accounts requires using a datacenter URL when setting up an Azure service account. For more information, see [Set up Azure service accounts](https://www.servicenow.com/docs/XKQpJvxWTKNL58XCkRHVxA "Create and configure cloud service accounts at ServiceNow AI Platform for the corresponding Microsoft Azure accounts.").{#azure-sub-account-pattern__configure-govcloud-azure-dd} {#azure-sub-account-pattern__configure-govcloud-azure-dd} ## Data collected by Discovery during horizontal discovery {#azure-sub-account-pattern__section_ggp_ql2_bgc} Discovery populates the data in the CMDB when running the Azure - Sub Account (LP) pattern. {#azure-sub-account-pattern__table_mkf_2hc_dgc__entry__2} | Field | Description | |-|-| | Name \[name\] | Name of the subscription or service account. | | Object ID \[object_id\] | The subscription ID, allocated by Azure for this resource. | | Account Id \[account_id\] | The subscription ID of the service account. | | Datacenter Type \[datacenter_type\] | Type of datacenter associated with the service account. The value is set to cmdb_ci_azure_datacenter. | | Datacenter URL \[datacenter_url\] | The URL of the datacenter associated with the service account. | | Is management account \[is_master_account\] | Boolean attribute indicating whether this is the management account. The value is set to false for discovered sub-accounts. | | Discovery credentials \[discovery_credentials\] | Reference field to the related Azure credentials. | | Parent account \[parent_account\] | Reference to the primary account, if it exists. | | Operational status \[operational_status\] | Operational status of the subscription, derived from its Azure state. For example: Operational or Non-Operational. | | Life Cycle Stage \[life_cycle_stage\] | Life cycle stage of the subscription, derived from its Azure state. For example: Operational, End of Operation, or End of Life. | | Life Cycle Stage Status \[life_cycle_stage_status\] | Life cycle stage status of the subscription, derived from its Azure state. For example: In Use, Action Required, On Hold, Billing Past Due, or Retired. | | Install Status \[install_status\] | Install status of the resource. Default value is Installed. | [Table 2. Cloud Service Account \[cmdb_ci_cloud_service_account\]] {#azure-sub-account-pattern__table_mkf_2hc_dgc} Discovery populates the data in the CMDB when running the Azure Management Groups pattern extension. {#azure-sub-account-pattern__table_azure_management_group__entry__2} | Field | Description | |-|-| | Name \[name\] | Management group name. | | Object ID \[object_id\] | Management group name and tenant ID in the following format: name+@+tenantId. For example: itomMgmtGroup@8bcff-vdc-btrv. | | Parent \[parent\] | References the direct parent Azure Management Group \[cmdb_ci_azure_management_group\] table. | | Install Status \[install_status\] | Install status of the resource. Default value is Installed. | | Operational status \[operational_status\] | Operational status of the resource. Default value is Operational. | [Table 3. Azure Management Group \[cmdb_ci_azure_management_group\]] {#azure-sub-account-pattern__table_azure_management_group} {#azure-sub-account-pattern__table_cloud_org__entry__2} | Field | Description | |-|-| | Name \[name\] | Tenant ID or name. * Tenant ID: When using management-level credentials * Tenant name: When using tenant-level credentials {#azure-sub-account-pattern__ul_xh3_wdp_skc} | | Object ID \[object_id\] | Tenant ID. | | DNS Domain \[dns_domain\] | Domain name entered during registration, for example: servicenow.com. This field is populated only when tenant-level credentials are used. | [Table 4. Cloud Organizations \[cmdb_ci_cloud_org\]] {#azure-sub-account-pattern__table_cloud_org} ## CI relationships and references {#azure-sub-account-pattern__section_dc4_ghc_dgc} The Azure - Sub Account (LP) pattern creates the following references to support Azure Sub Account discovery. References link to records in other tables and don't appear in the CI Relationship \[cmdb_rel_ci\] table. {#azure-sub-account-pattern__table_ns1_t2p_skc__entry__3} | CI | Field | Referenced CI | |-|-|-| | Key Value \[cmdb_key_value\] | Configuration item \[configuration_item\] | Cloud Service Account \[cmdb_ci_cloud_service_account\] | [Table 5. CI references] {#azure-sub-account-pattern__table_ns1_t2p_skc} The Azure Management Groups pattern extension creates the following relationships and references to support Azure Sub Account discovery. References link to records in other tables and don't appear in the CI Relationship \[cmdb_rel_ci\] table. {#azure-sub-account-pattern__table_bkg_jhc_dgc__entry__3} | CI | Relationship | CI | |-|-|-| | Azure Management Group \[cmdb_ci_azure_management_group\] | Contains::Contained by | Cloud Service Account \[cmdb_ci_cloud_service_account\] | | Cloud Organizations \[cmdb_ci_cloud_org\] | Contains::Contained by | Azure Management Group \[cmdb_ci_azure_management_group\] | | Azure Management Group \[cmdb_ci_azure_management_group\] | Contains::Contained by | Azure Management Group \[cmdb_ci_azure_management_group\] | [Table 6. CI relationships] {#azure-sub-account-pattern__table_bkg_jhc_dgc} {#azure-sub-account-pattern__table_ci_references__entry__3} | CI | Field | Referenced CI | |-|-|-| | Azure Management Group \[cmdb_ci_azure_management_group\] | Parent \[parent\] | Azure Management Group \[cmdb_ci_azure_management_group\]\* | [Table 7. CI references] {#azure-sub-account-pattern__table_ci_references}\* Only references the direct parent-child management group relationship. ## Azure Tag discovery {#azure-sub-account-pattern__section_lyw_zhc_dgc} The Azure - Sub Account (LP) pattern collects tags and populates them in the Key Value \[cmdb_key_value\] table. {#azure-sub-account-pattern__table_ojy_vss_5hc__entry__2} | Field | Description | |-|-| | Key \[key\] | Tag name. | | Value \[value\] | Tag value. | | Configuration item \[configuration_item\] | References the Cloud Service Account \[cmdb_ci_cloud_service_account\] table. | [Table 8. Key Value \[cmdb_key_value\]] {#azure-sub-account-pattern__table_ojy_vss_5hc}