Azure Integration (Start Here)
A full Azure integration has two parts. Do them in order. Each part uses its own Azure AD app registration.
Two apps, two setups
It is easy to miss the second step. Transact and co-sell are separate connections with separate apps and different permissions. Set up the Cloud Account first, then co-sell.
The two parts
| # | Part | What it does | Guide |
|---|---|---|---|
| 1 | Cloud Account (transact) | List, sync, and transact offers; private offers; metering | Azure Marketplace Setup |
| 2 | Co-Sell (referrals) | Send and receive Microsoft co-sell opportunities | Azure Co-Sell Setup |
Part 2 is optional — set it up only if you use Microsoft co-sell. Part 1 is required for everything else.
What each app needs
Both apps connect with Workload Identity Federation — no client secret is created or stored.
| Cloud Account (transact) app | Co-Sell app | |
|---|---|---|
| API permissions | None | Four delegated (see below) |
| Admin consent | Not needed | Required (Global Administrator) |
| Redirect URI | None | Web platform, Automatum callback |
| Authorized by | Partner Center Manager role + offer Technical configuration | Partner Center Referrals Admin role + admin-consented permissions |
| Federated credential | Yes | Yes |
Co-sell app permissions
Add these under the co-sell app's API permissions, then grant admin consent. Full steps are in Azure Co-Sell Setup.
| API | App (client) ID | Permission | Type |
|---|---|---|---|
| Microsoft Graph | — | User.Read | Delegated |
| Microsoft Partner | 4990cffe-04e8-4e8b-808a-1175604b879f | user_impersonation | Delegated |
| Microsoft Partner Center | fa3d9a0c-3fb0-42cc-9193-47c7ecd2edbd | user_impersonation | Delegated |
| Microsoft Partner Center (Legacy) | fabfbdc4-5751-471c-ac43-3826fa1afc31 | user_impersonation | Delegated |
Do this in order
- Confirm you meet the prerequisites for the Cloud Account.
- Complete Azure Marketplace Setup (Part 1).
- Complete Azure Co-Sell Setup (Part 2), if you use co-sell.
Need Help?
Contact support@automatum.io or use the in-app chat for help with Azure integration.