.. _azureportal_vault:

Insall app in Microsoft Azure portal for Vault
==============================================

*  Register app in Azure portal
    1. Open Microsoft Azure Portal
    2. Go to Microsoft Entra ID -> App registration
    3. Click New registration
        * Name: aizen-ai-app
        * Supported account types: Single tenant
        * Redirect URI: optional 
    4. Click Register

* Open the app (aizen-ai-app) 
    1. Go to Certificates and secrets
    2. Click new client secret
        Copy the contents of secret value (get to see it only once) and store it in safe place

* Capture the information for the app as it is required for vault authentication
        * Application (client) ID
        * Directory (tenant) ID
        * Client secret

* In azure portal, search for Key vaults
    1. Click on Create to create a new key vault 
        * Name (aizenai-vault)
        * Resource Group

* Go to Access control (IAM)
    1. Click on Add role
        * Search for Key Vault Secrets Officer and select
        * In Assign access, select User,group or service principal
        * Click on Select members 
           * Search for your app (aizen-ai-app), and Add

        * Optional, you can add Key Vault Administrator role to any adminuser to view secrets in portal