How to setup and start working with Aziverso

Install Aziverso

Important note
If you already have the old version installed named Azure Office Companion, then follow the steps in the article below first:
https://aziverso.com/azure-office-companion-is-now-aziverso-3-0

To install Aziverso, there are three available options:

  • Office 2019
    If you have Microsoft Office 2019 you can use this option directly
  • Office 2016
    If you have Office 2016 you need to install the Visual Studio 2010 Tools for Office Runtime first.
  • Update it
    Aziverso uses click-once and it will update automatically with the last release, you can use this option to update it manually.

After the installation is completed we need to execute Aziverso and create the first configuration.

First start of Aziverso

Execute Microsoft Excel

In Microsoft Excel, in the top main menu, click on Add-Ins and click on Settings in the Aziverso section.

Aziverso needs the following information to work:

  • Tenant ID
  • Application ID
  • Application key
  • Blob Container
  • Blob Connection String

Below an example of a configuration setting

Below the step to create each setting

Tenant ID

Enter in the Azure Portal, at the top of the blade, on the left, click on All services and in All services search for Active directory, see below

Or navigate into the Azure Active Directory Overview blade below

https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview

The Tenant ID is the name at the top of the blade, see below

Copy the value in Name and Tenant ID settings (if you like you can use a different value in the Name field)

Application ID

Aziverso requires read-only access permissions to the Azure subscriptions we want to retrieve the data and information.

Enter in the Azure Portal, in the Azure Active Directory Overview blade below

https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/Overview

Click on App registrations (Preview) and click New Registration

In the Register an application blade, in the display name write Aziverso
In the Supported account types leave the default settings (you can use also change it following your company security policies)

Your settings should be like in the picture below

Click Register, and copy the value of Application (client) ID, see below

Paste the value in the Application ID in the Aziverso settings.

Application key

Click on the “Certificate & secrets” on the left menu blade

On the right blade, click on the “New client secret” button, in the “Client secrets” area.
Write “Aziverso” in the description field (you can write any more convenient value for you)
In the “Expires” options, select Never (you can also select the most appropriate expiration period following your internal company security policies)

Your settings should be like in the picture below

Click Add button.

Click to the button to copy the Application key, see below

Paste the value in the Application key in the Aziverso settings.

Before creating the storage account, we need to set the grants to Aziverso, we can do that in two ways, for every single Subscription or using the Management Groups (recommended), below both the options explained.

How to add the Aziverso grants in the single Subscription

Select All services on your left and search for subscriptions, see below

Or navigate directly to the subscription blade below

https://portal.azure.com/#blade/Microsoft_Azure_Billing/SubscriptionsBlade

Select the subscription you want to grant the permissions

Click on Access control (IAM) and click on “Add” and “Role assignments”, see below

In the right blade, in the “Role” select Reader, in the “Select” write Aziverso and in the select it, your blade should like below

Click Save

Now Aziverso has reader grant in the whole subscription, you can repeat the same operation for each subscription.
The second and recommended option is using Management groups.

How to add the Aziverso grants in the Management Group

The Azure Management Groups give you the possibility to organize your subscriptions in groups and assign permissions and policies in the entire group, you can refer to the Microsoft documentation below.

https://docs.microsoft.com/en-us/azure/governance/management-groups/

In “All services” search for management groups, see below

Click on “Add management group”, select Create new.
In the “Management group ID” write Aziverso (you can also use another name)
In the “Management group display name” write Aziverso (you can also use another name)
Your screen should be like below, click on the Save button.

Select the subscription you want to move and click “Move”

Select the Aziverso group and click the Save button.

To assign the grant click on the Aziverso management group

Click on “details”

On the left blade select “Access control (IAM)”, on the top right select “Add” and “Role assignment”

In the right blade, in the “Role” select Reader, in the “Select” write Aziverso and in the select it, your blade should like below

Click Save

Now Aziverso has reader grants in the whole management group and in all the subscriptions inside the Aziverso group.
You can simply add another subscription into the group to enable the reader grants to Aziverso.

Blob Container

Click on “All services” and search for the storage account

Select “Storage account” and click on “Add”
In “Subscription” select one subscription.
In “Resource group” select “Create new” and write Aziverso.
In the “Storage account name” writhe Aziverso.

Your screen should be like below, click “Review + Create “.

Click the “Create” button.

When the deployment is completed, click on Go to the resource, see below, or select “Storage accounts” and click on the Aziverso storage account.

On the left blade click on “Blobs”, click on + Container and in the name write aziverso, see below

Click the “OK” button, and save this name in the Aziverso settings in the Blob Container field.

Blob Connection String

Click on “All services” and search for the storage account

Select “Storage account” and click on “Access keys” in the left blade menu, and click on the small button to copy in the clipboard the “Connection string” of key1, see below.

Paste the value in the Aziverso settings in the Blob Connection String field.

At this point you have all the settings you need and your Aziverso window setting should be like below.

Click the “Save” button and a message box will appear as below.

To quickly test if anything has been properly configured, click on the “Subscriptions” on the top Office Ribbon, the list of the subscriptions, a new Excel sheet will be created with all your subscriptions, see below.

Congratulation, you can now start using Aziverso.

Troubleshooting

Below some of the errors that you may receive when you click the “Subscriptions” button and how to solve them.

Message

“A null data has been received from Azure, check if the application has the proper security grants and the network connectivity.”

Solution

Check the permission setting in your subscription or management group