Set Up Azure Tenants
Who can use this feature
Anyone with these permissions: Manage source connections
This article explains how to set up an Azure tenant in Eon. You need to complete this step once per Azure tenant before you can connect any source or restore subscriptions within the tenant.
Set up an Azure tenant
You’ll run a deployment command that creates the necessary infrastructure in your Azure environment, then provide the command’s output values to Eon.
Before you start
Before you set up your Azure tenant, make sure:
-
You have the ID of an Azure subscription to use as the management subscription. Eon creates a managed identity and resource group in this subscription.
-
You have the Azure CLI installed and are signed in with the following permissions:
-
Owner on the management subscription.
-
Ability to create and manage service principals and app registrations in Microsoft Entra ID.
-
Start the tenant setup wizard
In the Eon console, go to the Azure setup page and click Set Up Azure Tenant.
The Azure setup wizard opens to the Management access step.
Enter your tenant and subscription details
In the Management access step, enter the following:
-
The ID of the tenant you want to set up. You can find this in the Azure portal under Microsoft Entra ID > Overview.
-
The ID of the management subscription you want to use for Eon’s infrastructure resources. You can find this in the Azure Resource Manager under Organizations > Subscriptions.
Eon uses these details to generate your deployment code.
Deploy
Choose Terraform or Bash. Eon generates a deployment command pre-filled with any required values.
Bash
Terraform
Copy the command Eon displays in the wizard and run it in your terminal.
The command signs you into the target tenant, retrieves the access tokens needed for deployment, downloads the Eon tenant onboarding script, and runs it.
For a full list of the resources Eon creates, see What Eon creates during tenant setup.
When the deployment finishes, it outputs the values that you’ll need in the next step.
Don’t move the managed identity to a different resource group or subscription after this step. Azure doesn’t support moving user-assigned managed identities between resource groups, and doing so breaks Eon’s ability to restore to the tenant.
Your Azure tenant is now set up and ready to connect source and restore subscription.