> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hightouch.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Azure

> Grant Hightouch access to resources within your Azure account.

## Overview

Hightouch's Azure integration powers several features:

* Workspace deployment on Azure (see [Regions](https://docs.hightouch.com/security/regions.md#supported-regions))
* [Self-hosted storage via Azure Blob Storage](https://docs.hightouch.com/security/storage.md#self-hosted-storage)
* [Azure Blob Storage](https://docs.hightouch.com/sources/azure-blob.md) source
* [Azure Blob Storage](https://docs.hightouch.com/destinations/azure-blob.md) destination
* [Azure Private Link](https://docs.hightouch.com/security/azure/private-link.md)

## Configure Azure

Azure configuration includes creating an app registration and granting access to Blob Storage. Once you've done both of these, you can use your Blob Storage information and Azure credentials to connect Hightouch.

### Create an app registration

1. In the [Azure Portal](https://portal.azure.com/), navigate to **Azure Active Directory**.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-ad.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=ab062c9bc6e743f4eda4aedb4e7115c2)

2. Locate and click **Manage** > **App registrations** in the left-hand menu.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-app-registration.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=d67a28de123628291d7f4e26a9a51daa)

3. Create a new app registration by selecting **+ New registration**. Give the application a descriptive **Name**, for example, "Hightouch-integration-user," and leave the **Supported account type** as **Accounts in this organizational directory only (Default Directory only - Single tenant)**. You don't need a redirect URI for Hightouch storage integration. Click **Register** when done.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-create-registration.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=c5d06c50170b7e952fdc84ae5aede741)

4. Next, you need an app secret for this account. While on the app registration screen, navigate to **Manage** > **Certificates & secrets** in the left-hand menu.
   In the **Client secrets** tab, click **New client secret**. Enter a **Description** and **Expires** time frame. Click **Add** to create the secret.

    

   > [!WARNING]
   >
   > Make sure to select a sufficient expiry time frame. If this credential
   > expires, Hightouch can't access your Azure Blob Storage, and if your
   > workspace is configured to use Azure for log storage, all syncs will fail.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-app-secret.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=11686bd594c8b8bfac77cf5d57f5b286)

5. Copy and store the secret **Value**, *not* the **Secret ID**, after you create it. You won't be able to read the value again later.

![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-app-secret-value.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=bbaf8806cc0578826f9d512428486551)

6. Navigate to the App **Overview** in the left-hand menu. Copy and save the **Application (client) ID** and **Directory (tenant) ID**. You need both of these and the Client secret value
   to configure Hightouch.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-client-tenant-id.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=56ac0769642281280fc9c75446c8632b)

### Grant access to Blob Storage

1. In the [Azure Portal](https://portal.azure.com/), navigate to your storage account, and then to the Blob Storage container you want to connect to Hightouch. If you don't have a container, [create one](https://learn.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal#create-a-container).

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-container.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=a960e1aa07586da5861b0601c7f0869f)

2. In the configuration for your Blob Storage container, go to **Access Control (IAM)** in the left-hand menu.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-iam.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=132f9239cc0d16bf69cc4ca323cdee2d)

3. Select **+Add** then **Add role assignment**.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-add-assignment.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=21ee99dc57d2192ebfb44fe2bdd52078)

4. Select the role you want to grant to the Hightouch integration. To use the integration for storage, we suggest
   using the **Storage Blob Data Contributor** role.
   If you want to assign more granular permissions, refer to the for [storage](https://docs.hightouch.com/security/storage.md) documentation
   and consult your Active Directory administrator.
   Once you've selected the role, click **Next** to assign **Members** to the role.

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-storage-blob-role.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=f3c8f6ab6453188b3e2756b2c8cb5928)

5. Keep **User, group, or service principal** as the access assignment. Click **+ Select members** and search for and select the Hightouch integration user you created during [app registration](#create-an-app-registration).

   ![Azure Portal screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/azure-portal-role-assignment.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=704ed1378ee09b2acd6766d1e8e3a91f)

6. Click **Review + assign** to confirm. The Hightouch user should now have access to your Azure Blob Storage.

## Configure Hightouch

To configure Hightouch to use the Azure integration user,
go to the [**Cloud providers**](https://app.hightouch.com/settings/cloud-providers?from=docs) tab on the Settings page. Click **Add cloud provider**, and select **Microsoft Azure**.

![Adding a new cloud provider in Hightouch](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/cloud-providers/add-new-credential.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=0c60f0fd564c5dc0747f01e0deaa5077)

Give your credential a **Display name**, and enter the **Tenant ID**, **Client ID**, and **Client secret** from your Azure configuration.

![Configuring Azure credentials in Hightouch](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/configure-azure-credentials.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=f979be8c9730b92bbd44c4664874423c)

## Azure credential usage

Once you've set up your Microsoft Azure credentials in Hightouch, you can select Microsoft Azure when setting up [external storage](https://docs.hightouch.com/security/storage.md).

![Hightouch app screenshot](https://mintcdn.com/hightouch-3c037897/L_vQfA0JQEpeGUUo/images/integrations/azure/use-1-external-storage.png?fit=max\&auto=format\&n=L_vQfA0JQEpeGUUo\&q=85\&s=c6f2c7a7c63c565398daa265a84aac34)