Settings
Service principal connection and runtime configuration
Connection
Read from environment variables at runtime
- Tenant ID
- —
- Client ID
- —
- Default subscription
- —
- Allow-list
- All accessible subscriptions
Credentials live in .env.local. Copy .env.example and fill in the values, then restart the dev server.
Connection status
Live check against Azure Resource Manager
| Environment variable | Status |
|---|---|
AZURE_TENANT_ID Directory (tenant) ID of the service principal. | Set |
AZURE_CLIENT_ID Application (client) ID of the service principal. | Set |
AZURE_CLIENT_SECRET Client secret value. Never commit this. | Set |
AZURE_DEFAULT_SUBSCRIPTION_ID Pre-selected subscription shown after the app loads. | Set |
AZURE_ALLOWED_SUBSCRIPTION_IDS Comma-separated allow-list. Limits which subscriptions can be managed. | Set |
Visible subscriptions
—
Create a service principal
Run this once with the Azure CLI
az ad sp create-for-rbac --name azure-manager --role Contributor --scopes /subscriptions/<subscription-id>
- 1. Run the command above, replacing the subscription ID.
- 2. Copy tenant, appId and password from the output into .env.local.
- 3. Restart the dev server and open the Subscriptions page.