Azure Kubernetes Service (AKS) Version

Quick Start Guide:

How To Retrive My Azure Account Infromation?

English v-1.0.3

1 Find Out More About WISE-PaaS/EdgeSense

Table of Contents

Azure Information For Deployment ...............................................................2

1. How to create and retrieve required information? .................................................................2

Method 1: Create and Get Information on Azure Portal ...............................3

1. Create Service Principal application ......................................................................................3

2. Assign the application to a role and get Azure Subscription ID ...........................................5

3. Get Tenant ID and Application ID ...........................................................................................7

4. Create and get Client Secret ...................................................................................................8

Method 2: Create via Azure CLI (Command-line Tool) ............................... 10

1. Install the Azure CLI ..............................................................................................................10

2. Sign in Account and get Subscription ID .............................................................................10

3. Create a service principal and get Application ID, Tenant ID and Client Secret .................11

2 Find Out More About WISE-PaaS/EdgeSense

Azure Information For Deployment

To deploy WISE-PaaS/EdgeSense to your Azure subscription, a set of Azure account information is

required. You will be prompted to enter required information on the WISE-PaaS/Marketplace, if you chose to

Create Deployment while purchasing EdgeSense perpetual license. WISE-PaaS Marketplace will use your

Azure account information to create depoloyment for WISE-PaaS/EdgeSense on Azure Kubernetes Service

(AKS) version to your Azure subscription. If you already have WISE-PaaS/EdgeSense installed in your Azure

service and do not wish to reinstall EdgeSense, you can Skip Deployment.

1. How to create and retrieve required information?

1.1. Use Azure Portal

OR

1.2. Via Azure CLI (command-line tool)

Below image illustrates an example of information required on the WISE-PaaS Marketplace:

3 Find Out More About WISE-PaaS/EdgeSense

Method 1: Create and Get Information on Azure Portal

1. Create Service Principal application

1.1. Sign in to your Azure Account through the Azure Portal.

1.2. Select Azure Active Directory.

1.3. Select App registrations.

1.4. Select New registration.

1.5. Provide a name for the application. Select a supported account type, which determines who can use the

application. Under Redirect URI, select Web for the type of application you want to create. Enter the URI

where the access token is sent to. You can't create credentials for a Native application. You can't use that

type for an automated application. After setting the values, select Register.

4 Find Out More About WISE-PaaS/EdgeSense

5 Find Out More About WISE-PaaS/EdgeSense

2. Assign the application to a role and get Azure Subscription ID

To access resources in your subscription, you must assign the application to a role. Decide which role offers the

right permissions for the application. To learn about the available roles, see RBAC: Built in Roles.

You can set the scope at the level of the subscription, resource group, or resource. Permissions are inherited to

lower levels of scope. For example, adding an application to the Reader role for a resource group means it can

read the resource group and any resources it contains.

2.1. Navigate to the level of scope you wish to assign the application to. For example, to assign a role at the

subscription scope, select All services and Subscriptions.

2.1. Select the subscription to assign the application to and store Subscription ID (○A Azure Subsctiption

ID)

If you don't see the subscription you're looking for, select global subscriptions filter. Make sure the

subscription you want is selected for the portal.

The Subscription ID created here is used in the first input

field on the WISE-PaaS Marketplace.

6 Find Out More About WISE-PaaS/EdgeSense

2.2. Select Access control (IAM).

2.3. Select Add role assignment.

2.4. Select the Owner role. By default, Azure AD applications aren't displayed in the available options. To find

your application, search for the name and select it.

2.5. Select Save to finish assigning the role. You see your application in the list of users assigned to a role for

that scope.

7 Find Out More About WISE-PaaS/EdgeSense

3. Get Tenant ID and Application ID

3.1. Select Azure Active Directory.

3.2. From App registrations in Azure AD, select your application.

3.3. Copy the Directory (tenant) ID (○C Directory (tenant) ID) and store it.

3.4. Copy the Application ID (○B Application (client) ID) and store it.

8 Find Out More About WISE-PaaS/EdgeSense

The Application (client) ID in Step 3.4 and

Directory (tenant ID) in Step 3.3 are used in the

second and third input fields on the WISE-PaaS

Marketplace.

4. Create and get Client Secret

4.1. Select Certificates & secrets.

4.2. Select Client secrets -> New client secret.

4.3. Provide a description of the secret, and a duration. When done, select Add.

9 Find Out More About WISE-PaaS/EdgeSense

After saving the client secret (○D Client Securet), the value of the client secret is displayed. Copy this

value because you aren't able to retrieve the key later.

The Client secrets is used in the fourth

input field on the WISE-PaaS Marketplace.

10 Find Out More About WISE-PaaS/EdgeSense

Method 2: Create via Azure CLI (Command-line Tool)

1. Install the Azure CLI

https://docs.microsoft.com/en-us/cli/azure/install-azure-cli?view=azure-cli-latest

2. Sign in Account and get Subscription ID

1. az login

If the CLI can open your default browser, it will do so and load a sign-in page. Otherwise, you need to

open a browser page and follow the instructions on the command line to enter an authorization code after

navigating to https://aka.ms/devicelogin in your browser. Sign in with your account credentials in the browser.

Command: (Get your Subscription Id)

1. az account show --query id

Output:

(○A Azure Subsctiption ID)

11 Find Out More About WISE-PaaS/EdgeSense

3. Create a service principal and get Application ID, Tenant ID and Client Secret

Command:

1. az ad sp create-for-rbac --name ServicePrincipalName

Output:

appId ➔ (○B Application (client) ID)

tenant ➔ (○C Directory (tenant) ID)

password (Client Secret)➔ (○D Client Securet)

Reference:

https://docs.microsoft.com/en-us/cli/azure/create-an-azure-service-principal-azure-cli?view=azure-cli-latest