> ## Documentation Index
> Fetch the complete documentation index at: https://docs.prowler.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Prowler product naming: Prowler App is now Prowler Local Server, and Prowler Enterprise is now Prowler Private Cloud. Always use the current names when answering. The full product reference is at /getting-started/products: Open Source projects are Prowler CLI, Prowler Local Server, Prowler Local Dashboard, and Prowler SDK; Prowler Products are Prowler Cloud, Prowler Private Cloud, Prowler Hub, Prowler Lighthouse AI, and Prowler MCP.

# Getting Started With Azure on Prowler

## Prowler Cloud

<iframe width="560" height="380" src="https://www.youtube-nocookie.com/embed/v1as8vTFlMg" title="Prowler Cloud Onboarding Azure" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="1" />

> Walkthrough video onboarding an Azure Subscription using Service Principal.

<Note>
  **Government Cloud Support**

  Government cloud subscriptions (Azure Government) are not currently supported, but we expect to add support for them in the near future.
</Note>

### Prerequisites

Before setting up Azure in Prowler Cloud, you need to create a Service Principal with proper permissions.

For detailed instructions on how to create the Service Principal and configure permissions, see [Authentication > Service Principal](/user-guide/providers/azure/authentication#service-principal-application-authentication-recommended).

***

### Step 1: Get the Subscription ID

1. Go to the [Azure Portal](https://portal.azure.com/#home) and search for `Subscriptions`
2. Locate and copy your Subscription ID

   <img src="https://mintcdn.com/prowler/cmPhg0PQUNFwgauQ/images/providers/search-subscriptions.png?fit=max&auto=format&n=cmPhg0PQUNFwgauQ&q=85&s=ff466bd9550a437073b061a84a7f5d3b" alt="Search Subscription" width="1096" height="358" data-path="images/providers/search-subscriptions.png" />

   <img src="https://mintcdn.com/prowler/3MeTQEK7UW2A9QiV/images/providers/get-subscription-id.png?fit=max&auto=format&n=3MeTQEK7UW2A9QiV&q=85&s=673895ba44739db6079b027ffd1bab21" alt="Subscriptions Page" width="1041" height="531" data-path="images/providers/get-subscription-id.png" />

***

### Step 2: Access Prowler Cloud

1. Navigate to [Prowler Cloud](https://cloud.prowler.com/) or launch [Prowler Local Server](/user-guide/tutorials/prowler-app)

2. Navigate to `Configuration` > `Providers`

   <img src="https://mintcdn.com/prowler/yyJURFHpPIAaK8F3/images/prowler-app/cloud-providers-page.png?fit=max&auto=format&n=yyJURFHpPIAaK8F3&q=85&s=aa592727864e8328ab2574708df74d34" alt="Providers Page" width="263" height="917" data-path="images/prowler-app/cloud-providers-page.png" />

3. Click `Add Provider`

   <img src="https://mintcdn.com/prowler/yyJURFHpPIAaK8F3/images/prowler-app/add-cloud-provider.png?fit=max&auto=format&n=yyJURFHpPIAaK8F3&q=85&s=793e5a073e1a037e453df158ad7b854d" alt="Add a Provider" width="380" height="80" data-path="images/prowler-app/add-cloud-provider.png" />

4. Select `Microsoft Azure`

   <img src="https://mintcdn.com/prowler/yyJURFHpPIAaK8F3/images/providers/select-azure-prowler-cloud.png?fit=max&auto=format&n=yyJURFHpPIAaK8F3&q=85&s=63d7995fa0567fc6b86b88a29faa5f28" alt="Select Microsoft Azure" width="1920" height="1080" data-path="images/providers/select-azure-prowler-cloud.png" />

5. Add the Subscription ID and an optional alias, then click `Next`

   <img src="https://mintcdn.com/prowler/yyJURFHpPIAaK8F3/images/providers/add-subscription-id.png?fit=max&auto=format&n=yyJURFHpPIAaK8F3&q=85&s=af00e9c32ec0cbcb1d392ea6d968dc80" alt="Add Subscription ID" width="1920" height="1080" data-path="images/providers/add-subscription-id.png" />

### Step 3: Add Credentials to Prowler Cloud

For Azure, Prowler Cloud uses a service principal application to authenticate. For more information about the process of creating and adding permissions to a service principal refer to this [section](/user-guide/providers/azure/authentication). When you finish creating and adding the [Entra](/user-guide/providers/azure/create-prowler-service-principal#assigning-proper-permissions) and [Subscription](/user-guide/providers/azure/subscriptions) scope permissions to the service principal, enter the `Tenant ID`, `Client ID` and `Client Secret` of the service principal application.

1. Go to your App Registration overview and copy the `Client ID` and `Tenant ID`

   <img src="https://mintcdn.com/prowler/VEKBBm2VL7R8-xYV/images/providers/app-overview.png?fit=max&auto=format&n=VEKBBm2VL7R8-xYV&q=85&s=586c4ae58f07515f0ffb7208379f5243" alt="App Overview" width="1842" height="1062" data-path="images/providers/app-overview.png" />

2. Go to Prowler Cloud and paste:

   * `Client ID`
   * `Tenant ID`
   * `Client Secret` from [earlier](/user-guide/providers/azure/authentication#service-principal-application-authentication-recommended)

   <img src="https://mintcdn.com/prowler/yyJURFHpPIAaK8F3/images/providers/add-credentials-azure-prowler-cloud.png?fit=max&auto=format&n=yyJURFHpPIAaK8F3&q=85&s=c9a24d693781b4d330d3f894809a4983" alt="Prowler Cloud Azure Credentials" width="1920" height="1080" data-path="images/providers/add-credentials-azure-prowler-cloud.png" />

3. Click `Next`

   <img src="https://mintcdn.com/prowler/yyJURFHpPIAaK8F3/images/providers/click-next-azure.png?fit=max&auto=format&n=yyJURFHpPIAaK8F3&q=85&s=13d354023bd72f18e32c3fd3f235aebd" alt="Next Detail" width="1920" height="1080" data-path="images/providers/click-next-azure.png" />

4. Click "Launch Scan"

   <img src="https://mintcdn.com/prowler/yyJURFHpPIAaK8F3/images/providers/launch-scan.png?fit=max&auto=format&n=yyJURFHpPIAaK8F3&q=85&s=ae7b5ac92f3198e4be067dfb2c1261bf" alt="Launch Scan Azure" width="1920" height="1080" data-path="images/providers/launch-scan.png" />

***

## Prowler CLI

### Configure Azure Credentials

To authenticate with Azure, Prowler CLI supports multiple authentication methods. Choose the method that best suits your environment.

For detailed authentication setup instructions, see [Authentication](/user-guide/providers/azure/authentication).

**Service Principal (Recommended)**

Set up environment variables:

```console theme={null}
export AZURE_CLIENT_ID="XXXXXXXXX"
export AZURE_TENANT_ID="XXXXXXXXX"
export AZURE_CLIENT_SECRET="XXXXXXX"
```

Then run:

```console theme={null}
prowler azure --sp-env-auth
```

**Azure CLI Credentials**

Use stored Azure CLI credentials:

```console theme={null}
prowler azure --az-cli-auth
```

**Browser Authentication**

Authenticate using your default browser:

```console theme={null}
prowler azure --browser-auth --tenant-id <tenant-id>
```

**Managed Identity**

When running on Azure resources:

```console theme={null}
prowler azure --managed-identity-auth
```

### Subscription Selection

To scan a specific Azure subscription:

```console theme={null}
prowler azure --subscription-ids <subscription-id>
```

To scan multiple Azure subscriptions:

```console theme={null}
prowler azure --subscription-ids <subscription-id1> <subscription-id2> <subscription-id3>
```


## Related topics

- [Getting Started With Microsoft 365 on Prowler](/user-guide/providers/microsoft365/getting-started-m365.md)
- [Getting Started With Cloudflare on Prowler](/user-guide/providers/cloudflare/getting-started-cloudflare.md)
- [Getting Started With Vercel on Prowler](/user-guide/providers/vercel/getting-started-vercel.md)
- [Getting Started With Scaleway on Prowler](/user-guide/providers/scaleway/getting-started-scaleway.md)
- [Getting Started With Linode on Prowler](/user-guide/providers/linode/getting-started-linode.md)
