Creating the service connection for Azure Hybrid Benefit data providers

Overview

A service connection allows you to establish access to Microsoft Azure portal and obtain data from it without sharing the credentials. A service connection is configured once by an administrator and then it can automatically use a service for obtaining data.

The Azure Hybrid Benefit add-on contains an Azure Hybrid Benefit service. This service is needed for creating a service connection to Microsoft Azure portal.

To create a service connection, take the following steps:

1. Configure the authentication and authorization settings for integration on Microsoft Azure portal.
2. Create a tenant in Enterprise Service Management.
3. Create a service connection in Enterprise Service Management.

Configuration

Refer to the Сreating the service connection for the Intune data provider article to configure the service connection for the Azure Hybrid Benefit data provider. The configuration steps for both extensions are quite similar with a couple of differences outlined below.

The following values should be used for Azure Hybrid Benefit in each corresponding step.

1. Assigning permissions:

•  Azure Service Management > user_impersonation
•  Microsoft Graph > User.Read

2. Creating a tenant:

Select Azure Hybrid Benefit in the Service field.

3. Creating a service connection:

Select Azure Hybrid Benefit - Azure Active Directory (Application) in the Service field.

Now you can use this service connection in the configuration of the Azure Hybrid Benefit data provider.