> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure IaaS

> Connect ThreatAware to Azure IaaS for enhanced security monitoring and device visibility

## Overview

The Azure IaaS integration enables ThreatAware to collect and monitor security data from your Azure IaaS environment, providing comprehensive visibility and threat detection capabilities.

<Info>
  **Connection Method**: API
  **Setup Time**: 15 minutes
  **Access Required**: Azure IaaS Administrator account
</Info>

## Setup instructions

<Steps>
  <Step title="Authorize ThreatAware in Azure">
    * Log in to the [Azure Portal](http://portal.azure.com) with a **Subscription Administrator** account.
    * Follow the prompts to authorise ThreatAware with the necessary permissions.
    * **Note**: For guidance on locating the **Subscription Administrator**, refer to [Microsoft’s Documentation](https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/add-change-subscription-administrator).
  </Step>

  <Step title="Configure Subscription Access">
    * Navigate to **Subscriptions** in the Azure Portal.
    * Select the relevant **Subscription** you want to integrate with ThreatAware.
    * !\[Select Subscription]\(image link)
  </Step>

  <Step title="Assign IAM Roles">
    * In the selected subscription, go to **Access Control (IAM)** > **Role assignments**.
    * Click **Add** > **Add role assignment**.
    * Choose **Reader** as the role and assign it to **ThreatAware Azure Connector**.
    * Ensure **Assign access to** is set to **User, Group, or Service Principal**.
    * !\[Assign IAM Role]\(image link)
  </Step>

  <Step title="Save and Review Configuration">
    * After completing the role assignments, verify that all permissions are configured as required.
    * Multiple subscriptions may require repeating the role assignment steps.
  </Step>

  <Step title="Complete the Integration in ThreatAware">
    * Return to ThreatAware, confirm the integration with Azure, and save the settings.
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="Subscription ID" icon="user">
    Unique identifier for each Azure subscription to be monitored.

    ```text theme={null}
    Field: Subscription ID
    Name: Azure Subscription ID
    Type: String
    ```
  </Accordion>

  <Accordion title="Role Assignments" icon="user">
    Confirm that ThreatAware Azure Connector is assigned the **Reader** role.
  </Accordion>
</AccordionGroup>

## Troubleshooting

<AccordionGroup>
  <Accordion title="Verification" icon="triangle-exclamation">
    In ThreatAware, ensure the **Integration Status** displays as **Active**.
  </Accordion>

  <Accordion title="Troubleshooting" icon="triangle-exclamation">
    * **Permission Errors**: Verify all required permissions are granted, and the correct roles are assigned.
    * **Access Control Issues**: Check that the **Reader** role was applied to **ThreatAware Azure Connector** for each subscription.
  </Accordion>
</AccordionGroup>

## Important notes

* Ensure the **Reader** role is assigned to **ThreatAware Azure Connector** for each subscription to monitor.
* The ThreatAware integration setup may vary depending on your Azure subscription type and permissions. Review the [Azure Access Control Documentation](https://docs.microsoft.com/en-us/azure/role-based-access-control/) for further details.