Cloud Setup Guide

Cloud Account Setup Guide

Learn how to connect your Azure, AWS, and GCP accounts with read-only permissions to enable cost analysis and optimization recommendations.

Security First

All instructions below create read-only access. CloudCost Sage will never be able to modify, delete, or create resources in your cloud accounts. We only read cost and usage data to provide insights.

Microsoft Azure Setup

Create a read-only service principal for cost analysis

Prerequisites

  • •Azure subscription with Owner or Contributor access
  • •Azure CLI installed or access to Azure Portal
  • •Permissions to create App Registrations

1Create App Registration

Navigate to Azure Portal → Azure Active Directory → App registrations

Or use Azure CLI:

az ad app create --display-name "CloudCost-Sage-ReadOnly"

2Create Service Principal

az ad sp create-for-rbac --name "CloudCost-Sage-ReadOnly" \
  --role "Cost Management Reader" \
  --scopes /subscriptions/YOUR_SUBSCRIPTION_ID

⚠️ Save the output! You'll need the appId, password, and tenant

3Assign Read-Only Permissions

In Azure Portal, go to Subscriptions → Your Subscription → Access Control (IAM)

Add role assignment:
Cost Management Reader
Add role assignment:
Reader

4Connect to CloudCost Sage

Go to Dashboard → Settings → Cloud Accounts and enter:

Tenant ID: From step 2 output
Client ID: From step 2 output (appId)
Client Secret: From step 2 output (password)
Subscription ID: Your Azure subscription ID

Verify Connection

After connecting, CloudCost Sage will start importing your cost data. This may take a few minutes for the initial sync.

Next Steps

1

Connect Your Account

Go to Dashboard → Settings → Cloud Accounts

2

Wait for Initial Sync

Data import typically takes 5-15 minutes

3

Explore Your Dashboard

View cost trends, anomalies, and optimization recommendations

Need help? Contact support at [email protected]