---
title: Set up Azure monitoring integrations
source: https://docs.newrelic.com/docs/infrastructure/microsoft-azure-integrations/get-started/activate-azure-integrations
---

With our Azure infrastructure integrations, you can report data to New Relic from dozens of Azure platform services. For all our solutions for Azure monitoring, see [Introduction to Azure integrations](https://docs.newrelic.com/docs/infrastructure/microsoft-azure-integrations/get-started/introduction-azure-monitoring-integrations).

## Features [#features]

To monitor your Azure services, we query them on a regular [polling interval](https://docs.newrelic.com/docs/infrastructure/microsoft-azure-integrations/azure-integrations-list/azure-polling-intervals-infrastructure-integrations). With our Azure integrations, you can:

-   View performance data from [dashboards](https://docs.newrelic.com/docs/infrastructure/integrations/find-use-infrastructure-integration-data) that automatically scale as you make changes to your ecosystem.
-   Set up [alerts](https://docs.newrelic.com/docs/infrastructure/new-relic-infrastructure/configuration/infrastructure-alerts-add-edit-or-view-host-alert-information#integration) to get notifications when things go wrong.
-   [Query your data](https://docs.newrelic.com/docs/using-new-relic/data/understand-data/query-new-relic-data) and create custom charts and dashboards to meet the specific observability challenges you have.

> #### 💡 TIP
>
> You can use Terraform to automate the process of enabling cloud integrations: see the [Terraform docs site](https://registry.terraform.io/providers/newrelic/newrelic/latest/docs/guides/cloud_integrations_guide).

## Requirements and limitations [#reqs]

Requirements include:

-   A New Relic account. Don't have one? [Sign up for free!](https://newrelic.com/signup) No credit card required.
-   Specific [Azure integrations](https://docs.newrelic.com/docs/infrastructure/microsoft-azure-integrations/azure-integrations-list) have their own requirements.

We cannot get data from Azure resources that:

-   Are located in Azure Government
-   Were created through the [classic deployment model](https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-deployment-model)

## Cost considerations [#cost-considerations]

When evaluating the cost of the Microsoft Azure integrations with New Relic, consider Azure's Monitor Pricing. Refer to the `Metric queries` cost item in the [Azure pricing documentation](https://azure.microsoft.com/en-us/pricing/details/monitor/#pricing). Pricing details:

-   Pricing is based on the number of API calls per month.
-   An estimate of the API calls we make to Azure services can be found on your [account status dashboard](https://docs.newrelic.com/docs/infrastructure/infrastructure-integrations/cloud-integrations/cloud-integrations-account-status-dashboard).

## Overview of enabling Azure integrations [#overview]

We'll describe the process of activating our Azure integrations in more detail below, but here's an overview of that process:

1.  You'll create a New Relic application and key in Azure.
2.  You'll grant this application access to the Azure services you want to monitor.
3.  You'll place the required information in the **Integrations** UI.

To use these integration activation instructions directly from our infrastructure UI, go to **[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Infrastructure > Azure > Add an Azure account**.

## Step 1: Get Azure subscription and tenant IDs [#get-ids]

To get your Azure account's subscription `id` and `tenantId`, use your local terminal if you have Azure's tools installed, or use [Azure's Cloud Shell](https://azure.microsoft.com/en-us/features/cloud-shell) terminal in the Azure portal.

1.  Open a terminal with access to your Azure account.
2.  Type the following:

    ```sh
    az account show
    ```
3.  Copy and save the subscription `id` and `tenantID` from the output response for later use.

The response should look similar to the response below. The subscription `id` and `tenantID` are highlighted.

```json lineHighlight=4,8
@Azure:~$ az account show
{
  "environmentName": "AzureCloud",
  "id": "9ffe9512-f4a2-42dd-1230-518aec34be21",
  "isDefault": true,
  "name": "Beyond Team Sandbox",
  "state": "Enabled",
  "tenantId": "ac6692da-1231-422f-22a8-9eed6dbe83f1",
  "user": {
    "name": "youremail@domain",
    "type": "user"
}
```

## Step 2: Register your app and get ID [#register-app]

You must have Azure permissions to register your application and copy its `Application ID`.

To register your app in Azure:

1.  Sign in to the Azure portal and go to the **Azure Active Directory**.
2.  From **Manage**, select **App registrations > New registration**.
3.  Enter a name for the application. We recommend that you name your app `NewRelic-Integrations`.
4.  In **Redirect URI** select `Web` and add `https://newrelic.com` as the sign-on URI.
5.  Create the application by clicking **Register**.
6.  From the **Overview** of your app, copy the **Application (client) ID**, and save it for later use.

## Step 3: Create a client secret in Azure [#create-client-secret]

To create a client secret associated with your application:

1.  In Azure, under the application you've just created, select **Certificates & secrets**.
2.  Under **Client secrets**, click on **New client secret** and then on **Add**. Choose the secret expiration date which can be up to 2 years. Once the secret expires, follow the steps to [update the application details](#update-app).
3.  Copy the value of **Client Secret** and save it for later use.

## Step 4: Provide permissions to services [#read-permissions]

Your app must provide `Reader` permissions for each Azure service you want New Relic to monitor:

1.  In the Azure Portal, go to **Subscriptions** and select the one you want New Relic to monitor.
2.  In the left menu, under **Settings**, click on **Resource providers**.
3.  Use the search bar to find **microsoft.insights**. If its status is `NotRegistered`, select it and click **Register**. Wait for the status to change to `Registered`.
4.  Navigate back to your subscription page and click on **Access control (IAM)** from the left menu.
5.  Click **+ Add**, then select **Add role assignment**.
6.  Search for and select the **Reader** role, then click **Next**.
7.  On the Members tab, click **+ Select members**. Search for your New Relic application name (e.g., **NewRelic-Integrations)**, select it, and click the **Select button**.
8.  Click **Review + assign** to save the role.
9.  After the first role is saved, repeat the "Add role assignment" process to also assign the **Monitoring Reader** role to the same New Relic application.
10. Ensure the **Monitoring Reader** role is assigned at the subscription level.

Some Azure services, including [Azure CosmosDB](https://docs.newrelic.com/docs/infrastructure/amazon-integrations/aws-integrations-list/azure-document-dbcosmos-db) and [Azure VMs](https://docs.newrelic.com/docs/infrastructure/microsoft-azure-integrations/getting-started/azure-vms-monitoring-integrations), require additional steps. See the [Azure integration documentation](https://docs.newrelic.com/docs/integrations/microsoft-azure-integrations/azure-integrations-list) for the services you want to enable.

## Step 5: Add app to New Relic [#complete-integration]

Now you can activate the Azure integration from our infrastructure UI. The UI will require the information you have saved in the previous steps, including:

-   Your Azure account's [subscription `id` and `tenantId`](#get-ids)
-   The application's [application ID](#register-app)
-   The application's [client secret](#create-client-secret)

To add your Azure app to New Relic:

> #### ⚠️ IMPORTANT
>
> Use Azure Monitor to collect Azure metrics at scale. Azure Polling will be deprecated soon.

1.  Go to **[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Infrastructure > Azure** and select the Azure Service you wish to add.
2.  Follow the steps in the UI to activate the integration in New Relic.
3.  If you have already completed the Azure account steps, skip to the end of the steps to fill out the form. (For `Azure account name`, enter the name you want to use to identify the account in your **Integrations** dashboard.)

After you activate an Azure integration, we'll start monitoring your Azure data at regular [polling intervals](https://docs.newrelic.com/docs/infrastructure/microsoft-azure-integrations/azure-integrations-list/azure-polling-intervals-infrastructure-integrations). To [find and use your data](https://docs.newrelic.com/docs/infrastructure/integrations/find-use-infrastructure-integration-data), use [metrics and events](https://docs.newrelic.com/docs/query-your-data/explore-query-data/data-explorer/introduction-data-explorer) or go to **[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Infrastructure > Azure**.

It may take few minutes until new resources are detected and synthesized as entities. See Cloud integrations [system limits](https://docs.newrelic.com/docs/data-apis/manage-data/view-system-limits) for more information.

## Update application details and rotate client secrets [#update-app]

It will be required to update the application's authentication credentials using the infrastructure UI or the [Cloud Integrations API](https://docs.newrelic.com/docs/apis/nerdgraph/examples/nerdgraph-cloud-integrations-api-tutorial/) once the client secret expires (maximum expiration date available in Azure is 2 years).

Follow these steps to rotate the Azure client secret in the infrastructure UI:

1.  Go to **[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Infrastructure > Azure** and click on **Manage Services** on the Azure account you wish to edit.
2.  Select the edit action next to Account Name to see and edit any application value.
3.  Edit the **Client Secret** field with the new value and confirm with **Save Changes**.

## Uninstall Azure integrations [#uninstall]

To uninstall Azure integrations, follow these steps.

| **If you want to...**                          | **Do this**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| ---------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Disable one or more Azure service integrations | To disable services while keeping your Azure account linked to New Relic: - Go to **[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Infrastructure > Azure > Manage services**. - From your **Edit Azure account** page, clear the checkbox for each active service you want to disable. - Save your changes.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Disable all Azure integrations                 | To disconnect your Azure account completely from New Relic, you need to unlink your Azure account. This requires being either the user who registered the app or an administrator. This procedure will disable all New Relic integrations associated with that Azure account. - Go to **[one.newrelic.com > All capabilities](https://one.newrelic.com/all-capabilities) > Infrastructure > Azure > Manage services**. - From your **Edit Azure account** page, select **Unlink this account**. - Save your changes. - Sign in to [Azure](https://portal.azure.com/) and go into **All Services > Identity > App registrations**, or go to **Azure Active Directory** service and select **App registrations**. - Find the registered app (the recommended name is `NewRelic-Integrations`). To see the full list of available apps, select the dropdown menu beside the search field and select **All apps**. - Select the app and, on the panel that opens, select **Delete**. |