Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.plerion.com/llms.txt

Use this file to discover all available pages before exploring further.

With the Microsoft Azure subscription integration, you can connect Azure subscriptions to Plerion. This enables Cloud Security Posture Management (CSPM) for continuous configuration checks, and optionally Cloud Workload Protection Platform (CWPP) to scan workloads for vulnerabilities.
Before onboarding Azure subscriptions, ensure you have a Microsoft Entra ID integration. The subscription integration reuses the same app registration created in Microsoft Entra ID.

​
Prerequisites

  • Owner role at the subscription scope
    Needed to grant the Plerion App registration permissions for CSPM, and to create the resource group, managed identity, and role assignments for CWPP.
  • CWPP requirements
    If you plan to enable CWPP, review the Azure CWPP prerequisites. These are not needed if you only want CSPM.

​
Steps to add a Microsoft Azure subscription integration

1

On the Plerion dashboard, go to Settings > Integrations

Sidebar navigation with Settings expanded and Integrations highlighted
2

Find Microsoft Azure subscription and click the + button

Integrations page with Azure subscription option and plus button to add integration
3

Select a Microsoft Entra ID integration

Choose an existing Microsoft Entra ID integration to reuse its app registration.
4

Grant the app registration subscription access

  • Provide access to the App registration using either the Azure CLI or Azure Portal.
  • If enabling CWPP, select the default region where Plerion will create a dedicated resource group.
5

Download and run the setup script

bash ms-azure-install-plerion.sh
  • This will list the available subscriptions.
  • Use the associated number to select one, or press y to install on all subscriptions.
CLI output showing available subscriptions
6

Install CSPM roles

  • Press y to install CSPM roles on all subscriptions, or enter the subscription number to install on a specific subscription.
  • To skip optional CSPM roles, press s. To install them, press y.
CLI output showing CSPM role installation prompt
7

Install CWPP roles (optional)

Press y to enable CWPP on all subscriptions, or enter a subscription number to enable it only on that subscription.
CLI output showing CWPP role installation prompt
8

Return to Plerion and verify access

  • On the Plerion platform, click Verify access.
  • Subscriptions with correct permissions will be displayed.
Verification screen showing Azure subscriptions added successfully
9

Add subscriptions to your tenant

  • Select the subscriptions to onboard and click Add subscriptions.
  • These subscriptions will now be available in Plerion for CSPM and CWPP.

​
Troubleshooting

See the Azure subscription troubleshooting guide for common onboarding errors and solutions.