Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Setup: Azure Cloud

Prerequisites:

  • Servers and/or virtual machines hosted in Azure, and an administrator account.

  • A technical advisor is required for initial configuration and ongoing supervision.

If you only have Office 365 or Entra ID licenses, see Cloud scan setup: Entra ID instead.

1

Select Microsoft Azure

  • If you haven't set a provider yet: go to Cloud Scan > Launch Cloud Scan > Azure.

  • If you already have a provider: go to Cloud Scan > Settings > New Provider > Azure .

2

Create new roles

  1. Go to the Microsoft Azure portal and log in with your administrator account.

  2. Search for Subscriptions in the search bar, then click on the subscription to scan.

  3. Click Access control (IAM) in the left menu, then click Add, then Add role assignment.

  4. Search for the Reader role, select it, then go to the Members tab.

  5. Click Select members, search for Stoïk Cloud Scanner, select it, then click Select.

  6. Click Review + assign twice to confirm.

  7. Repeat steps 4 to 7 for the Security Reader and Log Analytics Reader roles.

3

Grant permissions

  1. In the left-hand menu, go to Microsoft Entra ID > Roles and administrators.

  2. Search for the Global Reader role and click on it.

  3. Click Add assignments, search for Stoïk Cloud Scanner, select it, then click Add.

  4. Repeat steps 2 and 3 for the Security Reader role.

Do not grant additional rights such as Global Secure Access Administrator, otherwise it will not work.

4

Complete setup

Click Complete setup in the Stoïk Protect console.

Refresh the Stoïk Protect page if necessary.

PreviousCloud scan
Next"Bad Tenant" error

Last updated

Was this helpful?