How to access other tenants and subscriptions in Azure?

Question

we are trying to write some application to retrieve metrics from Azure Monitor Service for collecting data and shipping them to Prometheus.

One tenant with many subsriptions is ok. We are using an app registration and a corresponding enterprise application (aka service principal).

With the identifiers of the app registration (usbscription_id, tenant_id, client_id and client_secret) a java app is registering in Azure and collecting this data.

But let's imagine that we could access our customers tenants and subscription in this way. How could this be done in detail ?

We only want to use "our" subscription once and not the access data of the customer. There must be another way to proceed. Maybe some export of the service principal or something.

Regards Holger

Answer 1

You would need to create a service principal, or have the client create it, in the clients tenant. This SP would then be granted access to the required resources and your app would use that.

You may also want to look at Azure Lighthouse which may assist with access client subscriptions.