Creating an app registration and assigning a role to it

Create a provisioning credential for Azure.

  1. On the Azure portal, go to Azure Active Directory > App Registrations.
  2. Click + New Registration
    Figure 1. App Registration on the Azure portal
    Azure portal user interface, indicating the New Registration button
  3. Register a new application.
    1. Enter the user-facing display name.
    2. Select the supported account type.
    3. Enter the optional redirect URI.
    4. Click Register.
    Figure 2. Register a new application
    Register an applucation user interface, indicating the application name, the supported account type, and the optional redirect URI
    You are redirected to the app registration overview page.
  4. Copy and save the Application ID before closing this page. You will need to provide it to Cloudera when Creating a provisioning credential for Azure.
    Figure 3. Copy and save the Application ID
    Application registration user interface indicating the Application ID
  5. Go to Certificates & secrets and generate a new secret.
    1. Clik + New client secret.
    2. Enter a description and expiration time.
    3. Click Add.
    Figure 4. Generate a new secret
    Client user interface indicating new client secret description, expiration date, and Add button
  6. Copy and save the Client secret value. You will need to provide it to Cloudera later.
  7. Assign a role to your application.
    1. Go to Subscriptions.
    2. Click your subscription.
    3. Choose Access control (IAM).
  8. Click Add > Add role assignment and then assign the Contributor role or the custom role to your newly created application.
    1. Under Role, select Contributor or the custom role.
    2. Under Select, enter your app name, and then select it.
    Figure 5. Add Role assignment
    Access control user interface indicating Role and application name Select
  9. Click Save.

Once you have this setup ready, you can Create a provisioning credential for Azure in Cloudera.