# Microsoft Azure
## Overview
The [Azure](https://azure.microsoft.com/) integration connects data from your Azure account to your Sola workspace, making it easy to search and find answers to your specific use cases.
The Azure integration gives you a complete view of your Azure environment, allowing you to monitor and analyze Azure security posture and potential threats.
With the Azure integration, you can:
* Ensure cloud security best practices
* Gain full visibility into your cloud resources
* Identify security risks across your cloud environment
{% hint style="warning" %}
**Your data can only be retrieved, never modified.**
Once connected, your data is securely stored, and access is restricted to retrieving configurations and metadata only. Authentication methods ensure secure delegation of permissions while maintaining data integrity.
{% endhint %}
{% hint style="info" %}
**No hidden indirect cloud provider charges**\
The Sola integration won’t use resources that increase your cloud costs.
{% endhint %}
## Set up Azure data source integration with Sola
{% columns %}
{% column width="75%" %}
Go to ***Integrations*** > [***Data Sources***](https://app.sola.security/integrations/data-sources) > click ***New data source*** > select ***Microsoft Azure***.
*The Sola wizard will take you through the steps.*
{% endcolumn %}
{% column width="25%" %} Set up Azure ->
{% endcolumn %}
{% endcolumns %}
### Connect Azure to Sola
To connect Azure, you’ll need an Azure account with the necessary permissions to create and configure an App Registration.
{% tabs %}
{% tab title="App Registration" %}
These methods use an Azure App Registration within your subscription to securely grant Sola read-only access to your Azure services and resources.
* App Registration (Recommended)
* Terraform
{% hint style="info" %}
The **setup script**, provided in the Sola wizard, creates the relevant resources needed for accessing Azure data and extracting it to Sola:
1. **Connecting to Azure** - Authenticates to Azure and Azure AD using the active Cloud Shell session
2. **Setting credentials** - Resolves tenant name and switches to the specified subscription
3. **Creating service principal** - Creates an Azure AD application and service principal for Sola
4. **Creating custom role** - Creates a custom read-only role scoped to the subscription with the minimal required permissions
5. **Adding Microsoft Graph API permissions** - Grants the service principal Microsoft Graph reading permissions: `User.Read.All`, `Application.Read.All`
6. **Assigning roles** - Assigns the custom role and the built-in Reader role to the service principal on the subscription
{% endhint %}
{% endtab %}
{% endtabs %}
#### Troubleshooting Azure setup script common errors
| Error Code | Description | Resolution |
| -------------------- | --------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------- |
| MISSING\_PERMISSIONS | Your Azure account lacks a required permission on the subscription. | Ensure your account has the **Owner** or **Contributor** role on the target subscription and re-run the script. |
| UNAUTHENTICATED | The Azure CLI session is not authenticated or no valid account is detected. | Re-open Cloud Shell, ensure you are logged in, and re-run the script. |
| RESOURCE\_NOT\_FOUND | A required Azure resource (e.g. subscription) was not found or is not accessible. | Verify the subscription ID in the Azure Portal and re-run the script. |
| NULL\_SECRET | The service principal client secret was created but returned an empty value. | Re-run the script. If the issue persists, contact Sola support. |
| UNEXPECTED\_ERROR | An unexpected error occurred during the setup. | Try again. Contact Sola support if the issue persists. |
## Explore the app gallery for Azure apps
 Get started with [Azure-focused security apps](https://sola.security/app-gallery/?search=azure), built by our expert team.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.sola.security/integrations/data-sources/azure.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.