Azure Portal — Cloud Services Management
Basic Information
| Field | Value |
|---|---|
| Category | System Tools |
| Owner | Sergej Vdovičenko |
| Deputy | Artem Ryzhkov |
| Management Level | 5 |
| SLA | 8x5 |
| Login | Microsoft corporate account |
| URL | https://portal.azure.com |
Description
Azure Portal is Microsoft's web console for cloud infrastructure management. At Etnetera it primarily supports Entra ID and Microsoft 365, with potential for expanding IaaS/PaaS services.
Currently used Azure services:
- Entra ID (Azure AD): central identity — see Entra ID
- Microsoft 365: licenses, Exchange Online
- Azure Monitor: logs and metrics
- Key Vault: secrets and certificate management (planned)
Access and Login
- URL: portal.azure.com
- Login: corporate Microsoft account (
firstname.lastname@etnetera.cz) - MFA mandatory
- Roles: Global Admin / Subscription Owner — Sergej and Artem only
Warning
The Azure subscription is billed based on resource consumption. Do not create VMs, databases, or other paid resources without approval. Use Azure Cost Management to track costs.
Procedure — Manage Roles (RBAC)
- Portal → search Subscriptions or specific resource group
- Access control (IAM) → Add → Add role assignment
- Select role: Owner / Contributor / Reader (principle of least privilege)
- Select user or group from Entra ID
- Click Review + assign
Procedure — Monitor Costs
- Portal → Cost Management + Billing
- Cost Analysis — current and historical spend overview
- Set Budget Alerts for spend limit notifications
- Invoices: Billing → Invoices
Troubleshooting
| Problem | Solution |
|---|---|
| Cannot sign in to portal | Check MFA; verify Conditional Access policies in Entra ID |
| Access denied (403) | Check RBAC roles on subscription/resource group; request role assignment |
| Unexpected costs | Cost Management → Cost Analysis → filter by resource type; identify and stop unused resources |
Security Recommendations
- Use Privileged Identity Management (PIM) for sensitive roles (Global Admin)
- Enable roles only for the required duration (time-bounded activation)
- Regularly audit role assignments: Entra ID → Roles and administrators → Assignments
Related Guides
- Entra ID — identity and access, main Azure dependency
- Active Directory — sync to Entra ID
Contact
- Owner: Sergej Vdovičenko — Slack
@sergej - Deputy: Artem Ryzhkov — Slack
@artem - Security incidents or unexpected costs: Slack
#it-alerts