Obtaining Credentials for Altus Director

To get started with Altus Director and Microsoft Azure, you create an Active Directory (AD) application and service principal and obtain the required Azure credentials for Director. The service principal is tied to the AD application, and Altus Director uses the service principal credentials to create and delete resources on Microsoft Azure.

Follow these general steps to obtain the required credentials:
  1. Create the AD application and make sure that it has the contributor role in your Azure subscription, which allows you to create and delete resources. If you are not sure about these settings, contact your Active Directory administrator or Microsoft Azure Support.
  2. Create the service principal. This is typically created by a system administrator or security administrator in your organization. This person must have administrator privileges for your Microsoft Azure subscription.
  3. Obtain the following Azure credentials for Altus Director:
    • Subscription ID - You can get the subscription ID in the Azure Portal (either the new or old portal); see the Azure subscriptions blade.
    • Tenant ID
    • Client ID
    • Client Secret
You can create the AD application and service principal, get the tenant ID, client ID, and client secret, and assign the contributor role to the newly-created AD application by following one of these two methods:
  1. The Azure Portal Steps (easier to follow and recommended)
  2. The Azure CLI Steps
If you are having trouble finding this information, contact Microsoft support.