As no user is logged in when Open Access dashboards are being used, the SquaredUp enterprise application (service principal) is used, and needs to be assigned the reader role.
Open Access dashboards will only show resources, resource groups or subscriptions for which the enterprise application has at least the role of Reader.
If the SquaredUpAzure enterprise application has not been given access to any of the resources or subscriptions that a tile is scoped to then users will see zero cost or one of the following messages depending on the tile:
No resources matched the specified scope.
No entities found.
The subscription was not found in the list of available subscriptions.
There are no Azure subscriptions available: Check the Access Control (IAM) role and scope for the subscriptions you intend to access.
Check the Server Spec and Sizing Guidelines for information about memory recommendations for running Open Access.
Assigning the reader role to the SquaredUp enterprise application
To allow resources to show on Open Access dashboards you need to give the SquaredUp enterprise application a minimum of the Reader role.
- In the Azure portal browse to the resource, resource group or subscription you wish to give access to.
- On the menu, click on
Access control (IAM).
- Click the Add button, then
Add role assignment
- In the Role box type
Readerand select it from the list.
- In the Select box type
SquaredUpAzureand select your SquaredUp enterprise application. (If you have several SquaredUp applications you can identify the correct enterprise application by searching and opening
Enterprise Applications> searching for
SquaredUpAzure> clicking on the application with your SquaredUp server name in the Homepage URL column > clicking the Copy to clipboard button next to the Name > pasting the full name with GUID in the box here).
- Click the Save button.
- Now restart your SquaredUp virtual machine to allow the role take effect.
- Check that the Open Access page now shows the resource, resource group or subscription you gave access to.
Publishing Open Access dashboards
You can choose to use the Open Access navigation bar to give easy access to a range of Open Access dashboards, or simply give users an individual Open Access dashboard URL without the navigation bar.
Troubleshooting Open Access
Many issues can be resolved by rerunning the Open Access configuration to ensure that the SquaredUp enterprise application has at least the minimum of the Reader role.
On SquaredUp v5 we also recommend rerunning the generate option for the Open Access dashboard experiencing problems, and on SquaredUp v4 it is important to check the loopback URL.
For more information see Open Access troubleshooting steps.