Service Principal Management

Introduction

The first step in getting started with Cost Analyzer in Turbo360 is to add a Service Principal with reader access.

Service Principal is an application within Azure Active Directory, which is authorized to access resources in Azure Stack.

Turbo360 uses the authentication tokens of the Service Principal to manage the resources.

Client secret expiry

• Turbo360 allows users to configure the same date as the Azure portal to notify users 7 days before the expiration date to change the Client secret.

• Users can change the Client secret expiry date when adding or editing a Service Principal during Service Principal management.

Add a Service Principal

1. Navigate to Service principals section and click Add.
2. Users can reuse any existing Service Principal or add a new one by clicking the available checkbox.
3. Provide a name and Subscription information such as Tenant id, Client id, and Client secret expiration date.
   
4. Click Validate.
5. Upon successful validation, click Next.
6. Define the scope for Cost management groups which involves selection of subscriptions and other filters like resource groups, types, etc.

By checking the boxes next to the required subscriptions and clicking Apply, it is possible to grant access for multiple subscriptions to similar cost management groups at once.

7. Click Add.

Update a Service Principal

1. Click Edit icon next to any available Service Principal in Service principals section.
2. The client secret and secret expiration date can be modified.
3. Click Validate.
4. Click Next upon successful validation.
5. The scope of Cost management groups can be updated.

7. Click Update.

Remove a Service Principal

1. Click Delete icon next to the desired Service Principal in Service principals section
2. Click Delete in the confirmation box