> This page is for Data Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.eon.io/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.eon.io/_mcp/server.

# Azure: Connect Restore Subscriptions

This article explains how to connect Azure restore subscriptions to Eon.
You can connect as many restore subscriptions as you need.

## Connect a restore subscription

You'll start this procedure in the

Restore accounts > Azure subscriptions

page by clicking **New Connection**.

### Before you start

Before you connect your restore account, make sure:

* Your Azure tenant is set up in Eon.
  See [Azure: Set Up Azure Tenants] for instructions.

* You have the [Azure CLI](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli) installed and are signed in to the relevant Azure tenant under an identity that can manage service principals and IAM roles.

* You understand the permissions Eon needs to restore your resources.
  See [Azure: Permissions Deployment Files] for details.

#### Provide subscription details

In the wizard, provide the following information:

* **Tenant ID**: Select the Azure tenant that contains the subscription you want to connect.

* **Subscription ID**: Enter the ID of the subscription you want to connect.

* **Allow Eon to restore to**: Choose whether Eon can restore to all resource groups in the subscription or only to a specific resource group.
  If you choose a specific resource group, enter its name.

* **Internal resource group name**: Optionally customize the name of the resource group where Eon will deploy temporary infrastructure for restore operations.
  The default is `eon-restore-internal-rg`.

Eon uses these details to generate your deployment command.

#### Deploy

Choose **Terraform** or **Bash**.
Eon generates a deployment command pre-filled with any required values.

#### Bash

1. Select the **Bash** deployment method.

2. Paste the provided `curl` command in a Bash-compatible terminal and run.
   The command downloads and runs a script that installs the necessary roles using the Azure CLI.
   You can [review the script] before running it.

   [review the script]: https://eon.blob.core.windows.net/public/eon-azure.sh

3. Follow the prompts to choose the subscription you want to connect.
   Note that the list includes subscriptions in all tenants your Azure user account can access.

The script installs the roles for the subscription you selected.
Once the roles are installed, the script then calls the Eon API to add the subscription to your list of connected restore accounts.

If you want to connect more subscriptions, you can re-run the script for each subscription.

#### Terraform

1. Copy the module invocation Eon displays in the wizard into a `.tf` file (for example, `main.tf`).

   The generated snippet includes the `module` and `output` blocks only.
   If your Terraform configuration doesn't already define the `azurerm` provider, add these above the module block:

   ```hcl
   terraform {
     required_providers {
       azurerm = {
         source  = "hashicorp/azurerm"
         version = "~> 3.0"
       }
     }
   }

   provider "azurerm" {
     features {}
     skip_provider_registration = true
   }
   ```

   For version constraints and additional provider options, see the [AzureRM provider documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs).

   > **Note**
   >
   > If the `azurerm` provider is already configured in a parent module or elsewhere in your Terraform configuration, skip this step.

   The `azurerm` provider authenticates using your current Azure CLI session, so make sure you're signed in to the correct tenant and subscription.

2. Apply the changes to deploy the necessary infrastructure to your Azure environment.

Wait for the deployment to finish successfully before continuing to the next step.

#### Confirm

Return to the Eon console and click **Connect**.
Eon verifies that the necessary roles are installed and adds the subscription to your connected restore accounts.

You can then close the wizard and view the subscription in the **Azure subscriptions** tab.

Eon now has the access it needs in your Azure subscriptions, and you can restore data using the subscription as the destination.

## See also

* [About Restore Accounts].
* [Manage Restore Accounts].
* [Azure: Permissions Deployment Files].

[About Restore Accounts]: /data-protection/restoring/restore-accounts/about-restore-accounts

[Manage Restore Accounts]: /data-protection/restoring/restore-accounts/manage-restore-accounts

[Azure: Set Up Azure Tenants]: /data-protection/cloud-workloads/azure/azure-tenants/set-up-azure-tenants

[Azure: Permissions Deployment Files]: /data-protection/cloud-workloads/azure/permissions/azure-permissions-deployment-files