Qintorava DocsProduct documentation
Integration profile

Discovery provider · Microsoft Azure

Discover Azure tenants, management groups, subscriptions, and resources through Resource Graph.

Demo baseline · November 13, 2026
Download PDF

Prerequisites

  • Microsoft Entra application or workload identity
  • Reader and Resource Graph access
  • Tenant administrator consent

Configuration steps

  1. Register the discovery identity
  2. Assign Reader at the target scope
  3. Configure federation or a secret alias
  4. Validate Resource Graph access

Provider fields

FieldTypeRequirement and options
Tenant ID
tenantId		textRequired
Application / client ID
clientId		textRequired
Management group IDs
managementGroupIds		tag_listOptional
Subscription IDs
subscriptionIds		tag_listRequired
Authority host
authorityHost		urlOptional
Regions
regions		tag_listOptional
Resource types
resourceTypes		tag_listOptional
Federated credential name
federatedCredential		textOptional

Verify and troubleshoot

Test with the narrowest supported non-production scope. Confirm that the connection test reaches the expected provider and that the preview or receipt matches the intended scope. Check identity, credential references, network access and provider permissions before retrying. Record the failure stage and redact sensitive payloads when escalating.