Create Microsoft Azure credentials for billing download

Define the scheduled job that regularly uses a MID Server to download billing data from the provider. Cloud Provisioning and Governance saves the data in a cost table and uses the information to generate reports.

Vorbereitungen

Wichtig:

Starting with the Vancouver release, the Billing dashboard is no longer available if you have downloaded and activated the ServiceNow Store Cloud Cost Management application. The following changes occur:

• You’re redirected to the Cloud Cost Management home page by default.
• The View Dashboard widget in the Cloud User portal is replaced by the View Resources widget.
• The Current Month Spend widget and the Budget widget on the Cloud User portal don’t show any data if Cloud Cost Management is activated on the instance.

If you have activated the Cloud Cost Management application, you can only navigate to the Billing Dashboard when you’re using Cloud Provisioning and Governance on a domain-separated instance.

You must have an API Access Key credential for an Enterprise Agreement (EA) for all Azure accounts for which you want billing information.

Role required: sn_cmp.cloud_governor

Warum und wann dieser Vorgang ausgeführt wird

During the billing download process, all the resources are pulled into the system. Azure databases are placed in the Database [cmdb_ci_database] table.

This task involves two procedures:

1. Fill in the Azure Enterprise Agreement Credentials form with the information that you copy from the Azure Portal. This procedure enables the instance to use the EA credentials to download Azure billing data.
2. Specify the schedule for downloading Azure billing information.

Prozedur

1. Create Client Secret by navigating to the Overview page of the previously deployed Service Principal application.
   1. On the left pane, select Certificates & secrets.
   2. In the Client secrets section, select New client secret.
   3. On the form, fill in the fields.

      Field	Description
      Description	Description of the Client secret. For example, Client secret for MyServicePrincipal.
      Expires	Expiration period that suits your requirements. For example, 6 months, 12 months, 24 months, or Never.

   4. Select Add.
   After adding the Client Secret, a value gets generated and displayed.

   Hinweis:

   Copy this value immediately as it wouldn’t be shown again, which is your Client Secret (access key).
2. Copy the Application (client) ID and Directory (tenant) ID for later use.
3. Assign a role to the Service Principal.
   1. On the left pane, select Azure Active Directory.
   2. Select Roles and administrators.
   3. Select All roles and find the role that you want to assign.
   4. Select the role and then select Add assignment.
   5. Search for and select your Service principal by its name and then select Add.
4. Obtain a Subscription ID by selecting Subscriptions.
   1. Select the subscription that you want to use.
   2. Copy the Subscription ID from the Subscription Overview page.