Azure

The Azure connector imports the domains stored in Azure DNS.

Before You Start

Register the Microsoft.Network resource provider for your subscription. In new, empty subscriptions most resource providers, including Microsoft.Network, are inactive by default, and the connector fails without it.

Connect Azure

1. In Detectify, open DNS Connectors, click Add connector and choose Azure.

2. In Azure, create an app registration in your directory.

3. From the app registration’s overview, copy the tenant ID and the client ID into Directory (tenant) ID and Application (client) ID.

4. In the app registration’s certificates and secrets, create a new client secret. Copy its value into Client Secret. The value is only visible when you create it.

5. In your subscription’s access control (IAM), add a custom role. Give it one of these sets of actions:

   • To import domains from all your subscriptions, use the actions below and leave Subscription ID (optional) blank in Detectify:

     "actions": [
         "Microsoft.Network/dnszones/read",
         "Microsoft.Network/dnszones/*/read",
         "Microsoft.Resources/subscriptions/read"
     ],

   • To import domains from one subscription only, give the role DNS read permissions, then copy the subscription’s ID from its overview into Subscription ID (optional):

     "actions": [
         "Microsoft.Network/dnszones/read",
         "Microsoft.Network/dnszones/*/read"
     ],

6. Still in access control (IAM), add a role assignment for the custom role. Assign access to a user, group or service principal, and select the app registration you created.

7. Enter a Connector name and click Add connector.

Domains stored in Azure sync with your Detectify team every 8 hours. See Connectors for manual syncs and removing a connector.