---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Set up Microsoft Azure Government Cloud on Cloud Provisioning and Governance

# Set up Microsoft Azure Government Cloud on Cloud Provisioning and Governance {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

Set up Microsoft Azure Government Cloud on Cloud Provisioning and Governance for the first time. You can discover,
provision, and manage Microsoft Azure Government Cloud resources
using Cloud Provisioning and Governance, thereafter.

## Before you begin

Role required: admin  
Note:  
ServiceNow® ITOM products are not officially certified or supported for Germany and China regions.

## About this task

Be sure to perform the procedures in order. After you have performed the
Day 1 setup, you can perform the optional Day 2 setup and
configuration procedures as needed and in any order. Detailed
instructions for each procedure follow this overview.

To set up Microsoft Azure Government cloud on Cloud Provisioning and Governance, you must:

* Set up a Microsoft Azure Service Principal on the Azure Government Portal and register the service account on the Cloud Provisioning and Governance application.
* Configure a MID Server with the required properties to enable Microsoft Azure Government and the ServiceNow instance to communicate correctly.
* Use the Microsoft Azure Service Principal credentials to discover associated service accounts and cloud resources.
{#setup-azure-govt-cloud-provision-govern__ul_vvr_5p2_plb}

## Procedure

1. [Create a Microsoft Azure service
   principal](https://www.servicenow.com/docs/3zMlRPTf3~gp0FlJ4z5P3Q "To securely access resource and billing data on your Microsoft Azure account, the Discovery process must present appropriate Microsoft Azure account credentials. You create a special programmatic account — a Microsoft Azure service principal — to generate the required credentials.") on the Microsoft Azure Government portal.  
   Note:  
   Navigate to App registrationsRegister an applicationSupported account types section. Then, select the Accounts in this organizational directory only (Single tenant) option to ensure that the Active Directory that is configured for the Microsoft Azure Government cloud is used for authentication.
   For more information, see [Create an Azure AD
   application and service principal that can access
   resources](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal).
2. [Configure MID Servers](https://www.servicenow.com/docs/access?context=c_MIDServerConfiguration&version=yokohama&pubname=yokohama-servicenow-platform&ft:locale=en-US) to connect Cloud Provisioning and Governance to a Microsoft Azure Government cloud account.
   1. Navigate to MID serverCapabilities.
   2. Click Edit and add the following options:  
      * Azure
      * Cloud Management
      {#setup-azure-govt-cloud-provision-govern__ul_lfq_fjw_4lb}
   3. Click Save.
   4. **Optional:** Navigate to MID serverSupported Applications.  
      Skip the next step if ALL applications are selected.
   5. **Optional:** Click Edit and add the following applications to the Supported Applications List:  
      * Discovery
      * Cloud Management
      * Orchestration
      {#setup-azure-govt-cloud-provision-govern__ul_dlb_41g_plb}
   6. Click Save.  
      Note:  
      For more information, see:
      * [MID server
        selection](https://www.servicenow.com/docs/access?context=c_MIDServerSelector&version=yokohama&pubname=yokohama-servicenow-platform&ft:locale=en-US)
      * [MID server
        capabilities](https://www.servicenow.com/docs/access?context=t_ConfigureCapabilities&version=yokohama&pubname=yokohama-servicenow-platform&ft:locale=en-US)
      {#setup-azure-govt-cloud-provision-govern__ul_gr5_pzf_plb}
   {#setup-azure-govt-cloud-provision-govern__substeps_gky_vbr_4lb}
3. Navigate to MID serverProperties.
   1. Click New and add new records for each of the following name-value pairs:  
      MID Server properties{#setup-azure-govt-cloud-provision-govern__simpletable_nqt_blw_4lb__entry__2}

      | Name | Value |
      |-|-|
      | mid.cmp.azure_api.base_endpoint | https://management.usgovcloudapi.net/${apiPath} |
      | mid.cmp.azure_api.storage.container.path | https://${accountName}.blob.core.usgovcloudapi.net/?comp=list |
      | mid.property.azure_token_manager.endpoint | https://login.microsoftonline.us/${tenantId}/oauth2/token |
      | mid.property.azure_token_manager.endpoint_content | grant_type=client_credentials\&client_id=${clientId}\&resource=https%3A%2F%2Fmanagement.usgovcloudapi.net%2F\&client_secret=${clientSecret} |
      | mid.cmp.azure_api.storage.blob.path | https://${accountName}.blob.core.usgovcloudapi.net/${containerName}?restype=container\&include=snapshots\&comp=list |
      [ ]

      {#setup-azure-govt-cloud-provision-govern__simpletable_nqt_blw_4lb}
   2. Click Submit.
   {#setup-azure-govt-cloud-provision-govern__substeps_ftr_skw_4lb}
4. [Store the Azure
   service principal credentials in the
   instance](https://www.servicenow.com/docs/DvzfkOrfQSrS9kcVzwkzGA "To securely access data on your provider account, the Discovery process must present appropriate credentials. To make the credentials available to Discovery, you first create Azure service principal credentials in the Azure Portal. You then securely store the credentials in a service account in your instance.").
5. In the Cloud Admin Portal, navigate to ManageCredentials, and select the Azure Service principal record.
6. To discover service accounts associated to the Azure subscriptions that are available to this Service principal, click the Discover Subscriptions related link.

## Result

The Azure Subscriptions related list displays all subscriptions that are associated with the Azure service principal.

## What to do next

[Define the
schedule for downloading Microsoft Azure billing
data](https://www.servicenow.com/docs/qa4OaokcTNNLvx0eTzHn0Q "Define the scheduled job that regularly uses a MID Server to download billing data from the provider. Cloud Provisioning and Governance saves the data in a cost table and uses the information to generate reports.").

*[\>]: and then