> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sazabi.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure

> Give the Sazabi agent the Azure CLI (az) in its sandbox to interact with Azure resources using a service principal for non-interactive access.

[All Azure integration capabilities](https://docs.sazabi.com/catalogs/integrations/azure-cli)

## About

This CLI connection makes the Azure CLI (`az`) available in the Sazabi agent's sandbox. The agent can interact with Azure resources using a service principal for non-interactive access. The tool is baked into the sandbox image; connecting it authenticates the already-installed CLI.

## Prerequisites

* A Sazabi project.
* An Azure service principal: client ID (`AZURE_CLIENT_ID`), client secret (`AZURE_CLIENT_SECRET`), and tenant ID (`AZURE_TENANT_ID`).

## Set up in the dashboard

Configure the sandbox in the dashboard under [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis).

**Step 1**

### Find Azure in the catalog

In [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis), find Azure under **Browse sandbox CLIs** and choose to connect it.

**Step 2**

### Provide credentials

Enter the required values: `AZURE_CLIENT_ID` — the application (client) ID of your service principal; `AZURE_CLIENT_SECRET` — the client secret; `AZURE_TENANT_ID` — your Azure Active Directory tenant ID. Optionally set `AZURE_SUBSCRIPTION_ID` to default all commands to a specific subscription. Save to store them securely; Sazabi injects them into the sandbox when the agent runs.

## Set up with the CLI

You can also configure the Azure CLI connection with the [Sazabi CLI](https://docs.sazabi.com/reference/cli.md) (installed and authenticated — see [CLI reference](https://docs.sazabi.com/reference/cli/sandbox-clis.md)).

```bash theme={"system"}
sazabi sandbox-clis connect azure-cli --env AZURE_CLIENT_ID=<your-client-id> --env AZURE_CLIENT_SECRET=<your-client-secret> --env AZURE_TENANT_ID=<your-tenant-id>
```

To validate the credentials without saving, run the same command with `test` in place of `connect` (the test command also requires the `--env` flags).

## Verify

Ask the agent, in a thread, to run the `az` CLI (for example `az account show`) and confirm it returns real output from your account. If the command is not found, the CLI connection may not be enabled; if it runs unauthenticated, recheck the credentials.

## Troubleshooting

**Command not found** — Confirm the Azure CLI connection is enabled for the project under [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis).

**Authentication fails** — Recheck the credential values; a rotated or revoked token must be re-entered under [**Settings > Sandbox CLIs**](https://app.sazabi.com/settings/sandbox-clis) or with `sazabi sandbox-clis connect azure-cli`.

## Further reading

> [card] [Working with the agent](https://docs.sazabi.com/guides/investigate/working-with-the-agent.md)
>
> Put the connected CLI to work in an investigation thread.

> [card] [Set up the sandbox](https://docs.sazabi.com/guides/investigate/sandbox.md)
>
> How the sandbox works and its security model.

> [card] [Sandbox CLIs](https://docs.sazabi.com/catalogs/sandbox-clis.md)
>
> Browse the catalog and connect more tools.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.