> This page is for Data Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.eon.io/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.eon.io/_mcp/server.

# Azure: Connect Source Subscriptions

This article explains how to connect Azure subscriptions to Eon.
You can connect as many source subscriptions as you need.

## Connect a source subscription

You'll start this procedure in the

Source accounts > Azure subscriptions

page by clicking **New Connection** and selecting **Connect subscription**.

### Before you start

Before you connect your source account, make sure:

* Your Azure tenant is set up in Eon.
  See [Azure: Set Up Azure Tenants] for instructions.

* You have the [Azure CLI](https://learn.microsoft.com/en-us/cli/azure/install-azure-cli) installed and are signed in to the relevant Azure tenant under an identity that can manage service principals and IAM roles.

* You understand the permissions Eon needs to back up your resources.
  See [Azure: Permissions Deployment Files] for details.

#### Provide subscription details

In the wizard, provide the following information:

* **Tenant ID**: Select the Azure tenant that contains the subscription you want to connect.

* **Subscription ID**: Enter the ID of the subscription you want to connect.

* **Internal resource group name**: Optionally customize the name of the resource group where Eon will deploy temporary infrastructure for backup operations.
  The default is `eon-source-internal-rg`.

Eon uses these details to generate your deployment command.

#### Deploy

Choose **Terraform** or **Bash**.
Eon generates a deployment command pre-filled with any required values.

#### Bash

1. Select the **Bash** deployment method.

2. Paste the provided `curl` command in a Bash-compatible terminal and run.
   The command downloads and runs a script that installs the necessary roles using the Azure CLI.
   You can [review the script] before running it.

   [review the script]: https://eon.blob.core.windows.net/public/eon-azure.sh

3. Follow the prompts to choose the subscription you want to connect.
   Note that the list includes subscriptions in all tenants your Azure user account can access.

The script installs the roles for the subscription you selected.
Once the roles are installed, the script then calls the Eon API to add the subscription to your list of connected source accounts.

If you want to connect more subscriptions, you can re-run the script for each subscription.

#### Terraform

1. Copy the module invocation Eon displays in the wizard into a `.tf` file (for example, `main.tf`).

   The generated snippet includes the `module` and `output` blocks only.
   If your Terraform configuration doesn't already define the `azurerm` provider, add these above the module block:

   ```hcl
   terraform {
     required_providers {
       azurerm = {
         source  = "hashicorp/azurerm"
         version = "~> 3.0"
       }
     }
   }

   provider "azurerm" {
     features {}
     skip_provider_registration = true
   }
   ```

   For version constraints and additional provider options, see the [AzureRM provider documentation](https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs).

   > **Note**
   >
   > If the `azurerm` provider is already configured in a parent module or elsewhere in your Terraform configuration, skip this step.

   The `azurerm` provider authenticates using your current Azure CLI session, so make sure you're signed in to the correct tenant and subscription.

2. Apply the changes to deploy the necessary infrastructure to your Azure environment.

Wait for the deployment to finish successfully before continuing to the next step.

#### Confirm

Return to the Eon console and click **Connect**.
Eon verifies that the necessary roles are installed and adds the subscription to your connected source accounts.

You can then close the wizard and view the subscription in the **Azure subscriptions** tab.

Eon now has read access to your Azure subscriptions and can start discovering resources.

## See also

* [About Source Accounts].
* [Azure: Permissions Deployment Files].

[About Source Accounts]: /data-protection/backup-and-protection/backup-configuration/source-accounts/about-source-accounts

[Azure: Set Up Azure Tenants]: /data-protection/cloud-workloads/azure/azure-tenants/set-up-azure-tenants

[Azure: Permissions Deployment Files]: /data-protection/cloud-workloads/azure/permissions/azure-permissions-deployment-files