To discover Azure DNS data for multiple subscriptions by enabling Multi-subscription discovery during Azure 3rd Party Provider creation, the credentials associated with the provider should have the all the necessary permissions to fetch data across subscriptions. This section explains the configuration required for multi-subscription Discovery.
Create Azure app registration and credentials:
Complete the following steps to create required credentials:
Go to the App registrations.
Click New Registration. Specify the Name, select appropriate Supported account types and click Register.
After creating the App, go to Certificates & Secrets section, under the client secrets tab and click New Client Secret. Specify the Description and Choose the Expiry time and click Add.
Copy the value under Value field which is the Client Secret.
Get the Tenant ID and Client ID from the Overview section of the App.
Assign Permissions the App
Complete the following steps to assign required permissions to the App:
Navigate to the Subscription for which we want to assign permissions.
Go to Access Control (IAM) section and click Add > Add Role Assignment. Select the Role to be assigned and click Next.
Select Assign access to User, group, or service principal and click Select Members and search for the app created in the section Create Azure app registration and credentials and select the app.
Click review and assign.
Repeat the above steps to assign permissions to all the subscriptions.