Azure

Azure Onboarding Guide

Step-by-step instructions for connecting your Azure subscriptions to Park Your Cloud using a PYC service principal and Management Groups. Choose your method below.

Navigate to Accounts and Start Azure Onboarding

Screenshot: Azure Onboarding — Choose method

Expand

Where you are: The Azure Onboarding screen.
How to get here: Click Accounts in the top navigation bar, then select Azure from the dropdown.

Option	When to use it
Discover automatically	You have an Azure tenant with a Management Group set up. PYC will scan all subscriptions linked to your tenant automatically. Best for most users.
Add manually	You want to add one subscription at a time, or you do not have tenant-wide permissions.

■Select Discover automatically if you manage multiple Azure subscriptions under an Azure tenant (recommended).

■Select Add manually if you only need to add specific subscriptions or have restricted permissions.

■Once selected, click the Continue button at the bottom right.

Enter Your Azure Tenant ID (Step 1 of 4)

Screenshot: Enter Azure Tenant ID — Step 1 of 4

Expand

A 4-step wizard on the left sidebar. You are on Step 1: Tenant ID.

Note

If you have already onboarded some Azure subscriptions before, this flow will not affect them. It only adds new subscriptions not yet onboarded to PYC.

Field	What to enter	Example
Azure Tenant ID	Your Azure Active Directory Tenant ID. This is a unique identifier (UUID format) for your Azure organization.	xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Note

To find your Tenant ID: Go to Azure Portal > Azure Active Directory > Overview. Your Tenant ID is displayed on that page.

1Enter your Azure Tenant ID in the input field.

2Click Save, then click Continue.

Enter Your Management Group ID (Step 2 of 4)

Screenshot: Enter Management Group ID — Step 2 of 4

Expand

Step 2 of the wizard asking for your Azure Management Group ID.

Field	What to enter	Example
Management Group ID	The ID of the Azure Management Group where you performed the role assignment for PYC. This is typically your root Management Group ID.	xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Note

To find your Management Group ID: Go to Azure Portal > Management Groups. Click on your root management group and copy the ID shown.

1Enter your Azure Management Group ID in the input field.

2Click Save, then click Continue.

Run the Discovery Script (Step 3 of 4)

Screenshot: Run Discovery Script — Step 3 of 4

Expand

A PowerShell script file (azure-onboarding-script.ps1) is displayed on screen. This script assigns the necessary role to the PYC service principal across all subscriptions in your tenant.

1Click Download or Copy to get the script.

2Open the Azure Portal (https://portal.azure.com) as an Organization-level admin.

3Click the Cloud Shell icon (>_) in the top navigation bar of the Azure Portal.

4When prompted, select Bash (not PowerShell).

5Once the shell is ready, paste and run the script commands.

6Wait for the script to complete. The status bar at the bottom of the PYC screen will show "Verifying service principal... this may take up to 60 seconds."

7Once verification is done, click Verify, then Continue.

Why this is needed

This script grants the PYC service principal (pyc-cloud-manager-app) the Reader role across your Management Group, allowing PYC to discover all linked subscriptions automatically.

Important

You must be an Organization-level admin (Global Administrator or equivalent) in your Azure tenant to run this script successfully.

Verify Subscriptions (Step 4 of 4)

Expand

All 4 steps on the left sidebar are marked Complete. This is the final step of the Azure auto-discovery wizard.

1Click the Verify button at the bottom right.

2PYC will connect to your Azure tenant and load all discovered subscriptions.

3Wait for five minutes until the process is complete, then click Finish.

Note

PYC will display all Azure subscriptions it discovered under your tenant. They will appear in your Accounts list and are ready for scheduling and resource management.