Onboard Azure Account for Transilience Managed Compliance

Transilience Managed Compliance service offers compliance outcomes that includes

1. Security monitoring, incident creation
2. Vulnerability management, prioritization
3. Standards check, against CIS
4. Pen testing
5. Risk analysis, risk acceptance
6. Access reviews, network access reviews, log reviews

This document explains how to give permissions to Transilience backend to access your Azure account and read configurations needed for the audit.

There are two to the process, step 1 is to add an app , and step 2 is to add permissions to the app to collect the configuration.

Step 1. Add app and permissions

1.1 Add app registration on the app registrations page

1.2 Register tha app

1.3 Add client certs

1.4 Create a new client secret

Copy the Application (client) ID, secret value and secret ID (along with tenant ID and subscription ID).  You need to send it to us after you assign permissions below.

Step 2 . Assign Permissions

Once the app is created, you need to add the permissions for the app to read configuration.

** you need to add permissions in each of the subscriptions, you would need user administrator role to add permissions **

2.1 Go to the subscription, and IAM

If not already, activate reader permissions

2.2 Add Role Assignment

2.3 Click select members link, find the app name and add

2.4 Select Reader Role

2.5 Add Reader and Data Access permissions as well

2.6 Review and assitgn

2.7 Note the subscription ID and Tenant ID

Subscription ID should be on the subscriptions page and tenant ID is on tenant properties page

-subscriptionid

- tenantid

Last step

Send the client ID, secret value, secret ID, subscription ID and tenant ID to your account manager