---
title: "Azure Resources (API Ingest)"
slug: "azure-resource-logs"
updated: 2026-04-27T18:04:55Z
published: 2026-04-27T18:04:55Z
canonical: "docs.databee.buzz/azure-resource-logs"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.databee.buzz/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Resources (API Ingest)

In Microsoft Azure, a resource represents any managed entity, such as a virtual machine, a storage account, or a database, that you create and manage within the Azure environment. These resources are grouped into Resource Groups, which provide a way to manage them collectively. Azure Resource Manager is the platform that enables you to deploy and manage these resources. For more information, refer to [Microsoft’s official documentation](https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview).

**Integration Method:** API

**Tables**: Device Inventory Info (5001), Cloud Resource Inventory (5023)

This integration supports the following events.

| **Event** | **Description** |
| --- | --- |
| Virtual Machines | Gets a list of all the virtual machines in the subscription. |
| Virtual Machine Scale Sets | Gets a list of all VM Scale Sets in the subscription, regardless of the associated resource group. |
| Cloud Services | Gets a list of all cloud services in the subscription, regardless of the associated resource group. |

This integration supports following versions.

| Azure Resources API version | VMs and VM Scale Sets – 2024-07-01 Cloud Service – 2022-09-04 |
| --- | --- |

> [!NOTE]
> **Note**:
> 
> Azure Resources doesn’t support traditional versioning system. Instead, it is a continuously updated cloud service. As for this document preparation, the latest release was on [1st April 2025](http://learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview).

## Prerequisites

- The user should have access to Azure portal with an account that has Global Administrator privileges.
- The user should have access to the DataBee platform.

# Configuration Overview

1. Create an application with required permissions to fetch the data.
  1. [Create an application.](/docs/azure-resource-logs#_Create_an_application)
  2. [Assign Reader role to Subscription.](/docs/azure-resource-logs#_Assign_Reader_Role)
  3. [Create Client Secret.](/docs/azure-resource-logs#_Create_the_Client)
2. Add the [Azure Resources feed](/docs/azure-resource-logs#_DataBee_Configuration) in the DataBee console with the required Client credentials.

| **DataBee Parameters** | **Azure Resource Parameters** |
| --- | --- |
| Client Key | [Application (Client) ID](/docs/azure-resource-logs#Client_ID) |
| Client Secret | [Client Secret](/docs/azure-resource-logs#Client_Secret) |
| Token URL (<tenant_id>) | [Directory (Tenant) ID](/docs/azure-resource-logs#Tenant_ID) |
| Subscription ID | [Subscription ID](/docs/azure-resource-logs#Subscription_ID) |

## Azure Configuration

### Create an application

1. Log on to [Azure portal](https://portal.azure.com/) with an account that has the Global Administrator privilege.
2. In the **search bar**, search for **App Registrations** and select it. ![Picture 911171321, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-6mbccmyc.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
3. On the “App registrations” page, select **New registration,** then **“**Register an application” window will appear. ![Inserting image..., Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-c8lfsndu.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
4. On the “Register an application” window:
  1. Under ‘Name’ enter your Application Name then click on **Register** to create the application. ![Picture 2041538979, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-9ftbgsf9.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
5. On the app **Overview** page, copy the **Application (client) ID** and **Directory (tenant) ID** for later use. ![Picture 1669539631, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-sw22dp2h.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)

### Assign Reader Role to Subscription

1. Login on to [Azure portal](https://portal.azure.com/) with an account that has the **Global Administrator** privilege. In the search bar check for subscriptions and select it.

![Picture 259221383, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-zgml47ba.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
2. Select the Subscription name as shown below. ![Picture 1190632405, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-zfv7uckb.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
3. On the **Overview** page, copy the **Subscription ID** for later use.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-30i42e5b.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
4. Assigning a Reader Role to the Subscription. Click on Access Control and select **Add** Permission Name: Reader Type: RBAC Scope: Subscription ![Picture 731226317, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-3eixih9x.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
5. Under Role select the **Reader** role and click **Next.** ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-vlhc1djn.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
6. Under Members, click on **Select members** to add members and add the application created in [previous step](/docs/azure-resource-logs#_Create_an_application) and click on **Select.** ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-sg7zguch.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
7. Once a member is added click on **Review + Assign** to add reader role to subscription for accessing the APIs. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-i41r0i2x.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)

### Create the Client Secret

The final step in accessing the APIs is creating a **Client Secret**. To create it from the Azure Portal:

1. Select the [application](/docs/azure-resource-logs#_Create_an_application) created above.
2. Under **Manage**, Click **Certificates & Secrets**, and then **Client Secrets**. ![Picture 2037747993, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-h8edkidl.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
3. Click **New client secret**. Then “Add a client secret” window appears. ![Picture 1919625978, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-tde3jasb.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
4. On “Add a client secret” window:
  1. Enter a ‘Description’ for this client secret and select the desired expiry period from the ‘Expires**’** drop-list.
  2. Then click on **Add** to create the client secret. ![Picture 1677492263, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-wn8du5fk.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)

> [!NOTE]
> Note:
> 
> The user needs to re-create the client secret when it expires.
5. Copy the **Value** fields for later use. ![Picture 1115196797, Picture](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-djznyhg9.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)

## DataBee Configuration

1. Login to the DataBee UI, navigate to **Data** > **Data Feeds** and click the **Add New Data Source** button. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-mwr0pa2y.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
2. Search for the **Azure Resources** and click it as shown below.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/Screenshot 2026-04-27 at 10.58.50 AM.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
3. Click on the **API Ingest** option for collection method. ![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/azure-resource-logs-api-ingest-may-2025-image-lwmohjx5.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
4. Enter feed contact information and click **Next.**

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/Screenshot 2026-04-27 at 10.59.42 AM.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
5. In the configuration page, confirm the following:
  - API Base URL: this is the base URL that DataBee will interact with
  - Authorization Method: OAuth2
  - Client Key: paste the [Application (client) ID](/docs/azure-resource-logs#Client_ID)
  - Client Secret: paste the client secret [Value](/docs/azure-resource-logs#Client_Secret).
  - Token URL: replace <tenant_id> placeholder with the [Directory (Tenant) ID](/docs/azure-resource-logs#Tenant_ID) generated earlier.
  - Subscription ID: paste the [subscriptionId](/docs/azure-resource-logs#Subscription_ID).
  - Event types: preselected for all the events types the integration pulls.

![](https://cdn.document360.io/04e48772-4346-44a4-aa69-043eca42257c/Images/Documentation/Screenshot 2026-04-27 at 11.00.47 AM.png?sv=2026-02-06&spr=https&st=2026-10-30T11%3A37%3A38Z&se=2026-10-30T12%3A37%3A38Z&sr=c&sp=r&sig=wDY6vpQRmpvocOWe2VdZqYTp0JDcdLcVc3Y1PCiVYA8%3D)
6. Click **Submit**.

## Troubleshooting Tips

- Ensure the token is pasted correctly. Since you cannot view the token after the 1st time, re-create the token, paste it on a text editor to ensure no spaces or unexpected characters are included and reconfigure the DataBee feed.
- Ensure that permissions are added correctly, and the subscription is [assigned reader role](/docs/azure-resource-logs#_Assign_Reader_Role) in order to make API calls.