如何在Azure门户生成密钥令牌并获取ManageIQ所需的Azure客户端ID

Hey there! Let me walk you through exactly how to get the Azure Client ID and Client Secret (token) you need to set up ManageIQ monitoring for Azure. It's straightforward once you know the steps in the Azure portal:

The Client ID is tied to an Azure AD application registration, so we'll start there:

• Log into the Azure portal, search for and navigate to the Azure Active Directory service.
• In the left-hand menu, find App registrations and click New registration.
• Fill out the basic details:
  • Name: Pick something descriptive, like "ManageIQ-Monitor" so you can easily identify it later.
  • Supported account types: Choose Accounts in this organizational directory only (this is the most secure option for internal tenant use).
  • Redirect URI: You can leave this blank since ManageIQ doesn't require it for this setup.
• Click Register to create the application.
• Once registered, head to the application's Overview page. Here you'll see the Application (client) ID—this is exactly the Client ID ManageIQ asks for. Copy it and store it somewhere safe.

Next, we'll create the client secret (which acts as the token for authentication):

• From your application registration page, go to the left-hand menu and select Certificates & secrets.
• Switch to the Client secrets tab, then click New client secret.
• Add a description (e.g., "ManageIQ Access Token") and choose an expiration period based on your security policies (1 or 2 years is common).
• Click Add—you'll now see the secret's value appear. Important: This value is only shown once! Make sure you copy it immediately and save it securely, because you won't be able to view it again after leaving this page. This is your Client Secret token.

To let ManageIQ monitor your Azure resources, you need to grant the application appropriate permissions:

• Go back to the Azure portal homepage, search for and open Subscriptions.
• Select the subscription you want ManageIQ to monitor.
• In the left-hand menu, click Access control (IAM), then select Add > Add role assignment.
• Choose a role: For monitoring purposes, the Reader role is ideal—it gives read-only access to all resources, which is exactly what ManageIQ needs. If you require additional permissions later, you can adjust this, but Reader is the safest starting point.
• On the Members tab, select User, group, or service principal, then click Select members.
• Search for the name of the application you created earlier (e.g., "ManageIQ-Monitor"), select it, and click Select.
• Finally, click Review + assign to complete the role assignment.

A quick final tip: Don't forget to also grab the Directory (tenant) ID from your application's Overview page—you'll need this along with the Client ID, Client Secret, and your Azure subscription ID when configuring ManageIQ.

内容的提问来源于stack exchange，提问作者Joseph Hwang