1. Kion Success Center
  2. Azure Administration
  3. Getting Started

Azure CSP Partner Consent

Follow

Last updated

Azure CSP Partner Consent

Accounts > Azure CSPs

You can obtain partner consent by either entering the required information while adding an Azure CSP in Kion, or you can generate a link to send to your partner so they can enter the information themselves.

Adding Application Information to the Partner Consent Form

This information is required whether you enter it while adding the CSP or through the partner consent link.

1. Create a service user

  1. Sign in to the Azure Portal (https://portal.azure.com for commercial or https://portal.azure.us for Gov) using credentials for your (the CSP Partner's) Azure Tenant.
  2. Navigate to Microsoft Entra ID.
  3. Copy the Microsoft Entra ID domain name and paste it into the Partner Domain Name field in the Kion Partner Consent page.
  4. In the Azure Portal, navigate to Users > New User.
  5. Enter a user name and friendly name for the user.
  6. Select Auto-Generate Password.
  7. Click Show Password.
  8. Copy the temporary password to notepad or a word document for later use.
  9. Under Groups and Roles, click the User link.
  10. Search for and select billing administrator.
  11. Click Create.
  12. Sign in to the Azure Portal as the new user and set a new password.

2. Verify the service user

  1. Sign in to the Microsoft Partner Center using admin credentials.
  2. Navigate to Settings > User Management.
  3. Select the new service user from the list.
  4. Under Roles and Permissions, it should show that the service user manages your organization's account as a billing admin.

3. Create an app registration

  1. In the Azure Portal, navigate to App Registrations > New Registration.
  2. Enter a name for the registration.
  3. Enter a redirect URL. For example, https://YOURKionDOMAINHERE:443/api/v3/azure-csp/complete-service-account-registration.
  4. Copy the App Registration (client) ID and paste it into the Application Registration ID field in the Kion Partner Consent page.
  5. Navigate to Certificates and Secrets > New Client Secret.
  6. Set the client secret to never expire.
  7. Copy the client secret and paste it into the Application Client Secret field in the Kion Partner Consent page.

4. Grant the app permissions

  1. In the Azure Portal, navigate to API Permissions > Add a Permission.
  2. Select Microsoft Entra ID.
  3. Select the following delegated permissions:
    • Directory.AccessAsUser.All
    • User.Read
  4. Click Add Permissions.
  5. Navigate to API Permissions > Add a Permission.
  6. Under APIs My Organization Uses, find Microsoft Partner Center.
  7. Select the following delegated permissions:
    • user_impersonation
  8. Click Add Permissions.
  9. Click Grant Admin Consent.

5. Register the app in Microsoft Partner Center

  1. Sign in to the Microsoft Partner Center.
  2. Navigate to Settings > Partner Settings > App Management.
  3. Under Web App, click Register Existing App.
  4. Select the web app you created in Azure and click Register Your App.
  5. Click Provide Admin Consent.
  6. Review and accept the permissions requested Microsoft dialog. When you accept, Azure redirects you to your app's return URI. Depending on your app, this may result in an error. If you receive an error, the app has still been granted consent. There is no further action required.