To allow CDP to create resources on your Azure account, you must create the app-based credential.

When working with an Azure environment, you can use the app-based credential to authenticate your Azure account and obtain authorization to create resources on your behalf. The app-based credential allows you to manually configure the service principal created within the Azure Active Directory.

The app-based method requires Owner role to be able to create a service principal, which must be given Contributor role or its equivalent.

To learn more about the app-based credential and its requirements, refer to Credential options on Azure.  

For instructions on how to create a credential, refer to Create an app-based credential.