Account Onboarding Process – Azure

To Start setting up Azure account, you can follow steps-

The fields in the Authentication page are as follows



Account Name

Enter the name of the Account. For example, Azure_Dev.
Description Provide a short description about the account.
Here, you can select the configuration settings for your cloud account. There are three options to choose from – None, Express and Custom.

  • None – Select None if you do not want any governance automation for this cloud account.
  • Express – Express is like a quick setup wizard, wherein the best practice configurations will be automatically setup for the cloud account.
  • Custom – If you want to tailor the configurations for the cloud account, select custom. All the options will be selected by default and you can uncheck them individually in the Configurations section.
    Select the appropriate environment for your cloud account as it determines the governance settings. For example, if the cloud account is for development, then select that from the list. The Environment list consists of – Production, Staging, QA and Development.
    Scope Select the scope for your account. That is:

    Private – Select Private if the cloud account is to be used only by you

    Tenant – Select tenant if account will be shared across tenants associated.

    Account – Select Account to share with entire team
    Tenant ID Enter the unique tenant ID associated with the account. Tenant ID is a string.
    Application ID Enter the application ID.
    Application Secret Enter the Application Secret Key.
    Subscription Select a subscription option from the drop down list that appears.


    In the Activation section you can select the Compute, Storage, Network, Database, and Web cloud resource types that can be managed by CoreStack.

    Cloud Products that can be added to be monitored by CoreStack are:

    Cloud Products Types
    • Images – VM Images Publishers, Images
    • Virtual Machines – VM Scale Sets, VMs, VM Sizes
    • Container Instances – Container Groups, Registry, Container Operations
    • Container Services
    • Others – Availability Sets
    • Azure kubernets – Clusters
    • Storage Disks – Disks, Snapshots
    • Accounts – Operations, Storage Accounts
    • Recovery Services – Vaults
    • Routes – Route Table
    • Virtual Networks – Virtual Network, Network Security Group, Public IP Address, Network Interface, Traffic Manager Profile
    • Load Balancers
    • Application Gateways – Application Gateway, Available SSL Policy
    • Servers – MSSQL,MSQL,PGSQL
    • Sites – App Services


    Under Configuration, we can provide the requisite settings to manage the 4Cs of governance – CloudOps, Compliance, Consumption and Cost.


    This section handles all the configuration settings associated with alerts, notifications and reports.

    Alerts and Notifications

    Alert Configuration

    CoreStack issues alerts in the situation where set threshold limits are exceeded for the associated cloud account.The alerts set here appear in the CloudOps Dashboard under the Threshold Alerts section.

    Let us take the example of CPU alert under Compute – Virtual Machines. You can set an alert stating that a CPU Utilization above a threshold limit of say, 90%, is to be flagged. This alert will be sent as an email as well as flash in the CloudOps Dashboard.

    Field Description
    Threshold This is where the numerical value can be provided.
    Operator Greater than, Greater than or equal, Lesser than or equal, Lesser than
    Aggregation This section determines how the actual performance value should be compared with the threshold for example. That is, should the average monthly CPU utilization be compared to the threshold or the maximum value hit at a specific time be compared to the threshold.
    Window Size The time interval to check if the actual metric is crossing the threshold set. For example, the comparison should be made every 30 minutes or every 4 hours or every day. The value is shown as PT1H45M, where:
    • PT stands for Period Time
    • 1H stands for 1 hour
    • 45M stands for 45 minutes
    Resolve Alert
    Alert created for the resource based on the metric configured can be resolved with selected actions.
    Activity Notifications

    You can select the activities for which notifications should be sent as an email to you. The activity list is populated based on the Environment selected in the Authentication section.


    This section enables you to add the email and webhook using which notifications can be sent to you. Enter a valid email address and webhook in the respective fields.


    Here, you can select the reports that will be sent to the user account at the end of the day. The two reports available are:

    Daily Cost by Cloud Accounts

    This shows breakup of daily costs incurred by the cloud account.

    Template Execution Summary

    This report shows the number of templates executed during the day, how many of them were successful and how many failed.


    Compliance is one of the pillars of good cloud governance. It is vital to configure the requisite settings right at the start to ensure compliance. This section is split into two sections: Governance Rules and Schedules.

    Governance Rules


    Tags help to organize Azure cloud resources, and simplify the billing process.

    Tags Description
    Append Tags Using CoreStack, you can add tags and the corresponding values will be appended for all the resources provisioned hereafter either through the Azure portal or through CoreStack.
    Enforced Tags Enforced tags refer to those tags, the resources associated with which will be actively monitored and any non-compliance be reported in the Compliance dashboard.
    Resource Locks

    Resource Lock will enable Termination protection at Resource Group level.


    Here, select the policies that you want to be applicable for your cloud account. There are different types of policies you can select from – Standards, Security, Cost Optimization and Availability.


    This is to provide rules for scheduling auto shutdown of the virtual machine associated with the cloud account.

    The options available are:

    Field Description
    Shutdown Details The frequency of the shutdown must be mentioned here. For example, Daily.
    Shutdown Time Select the time at which the VM shutdown must be initiated.
    Restart Time Select the time at which the VM should get restarted.
    Applicable Tags Add tags to specify which VMs should be auto showdown.
    Exclude Resource Groups Select Resource Groups, the VMs tagged to which should not be auto shutdown.


    This section highlights the settings for VMs specific to this cloud account in the Self Service Catalog. Here you can select the Operating Systems, Resource Groups, Preferred Regions and Compute Sizes for VMs.

    Fill these fields:

    Field Description
    Operating System Select the OS that should be made available to VMs associated with this account.
    Resource Group Resource Group is referred by CoreStack for any configuration and storage account required to store the monitoring and insight data temporarily. Resource Group names only allow alphanumeric characters, underscores, hyphens and parentheses. You can also use periods, but you cannot end the name with it.
    Preferred Region Select the region to provision the resource.
    Preferred Compute Size Select the preferred compute size for the VM.


    You can configure the budget for this specific cloud account in this section. The budget displayed here is taken into account when computing the cost analytics and display accordingly in the Cost Analytics Dashboard. You can specify the Daily, Weekly and Monthly budget here.

    User Defined 

    User can define their own budget and enter it in User Defined Section manually.

    Auto Calculated Auto Calculated Cost which is suggested is derived by the system based on the usage trends of the account currently reviewed. 


    This is the last step in the Onboarding Process, wherein the user levels are to be defined. That is, here, you can define which roles can work with this cloud account.

    You can change the role permissions in Settings > Roles.

    View onboarded account details

    Already onboarded a cloud account on CoreStack? Here’s how you can view the details:

    1. Navigate to Cloud Accounts.
    2. Select the cloud account for which you want to view the details. For example, if you want to look at an Azure account, click on AzureRM available on the left side, a list will appear on the right. From that list, click on the Account Name or select “View Settings” to view more options.