9.6 Configuring a Contributor User for PlateSpin Migrate to Use

PlateSpin Migrate uses the Microsoft Azure API to automate workload migrations to Azure. A user with administrative privileges on the Azure subscription must create a user for PlateSpin Migrate in your Azure Active Directory, then assign the Contributor role to the user for the subscription. You use this Contributor user credentials to add Azure as a target in Migrate. Migrate uses the credentials for this user when it accesses the Migrate Azure API through the related subscription.

To configure a Contributor user for a subscription:

  1. In Azure Active Directory, create a new special-purpose user for PlateSpin Migrate.

    1. Go to the appropriate Azure Portal, then log in as a user with administrative privileges on the Azure Subscription in your account.

    2. In the Portal sidebar, select Azure Active Directory.

    3. In the left pane under Manage, select Users, then select All Users.

    4. In the Command bar, select New User to create a new user.

    5. On the User page, specify the following information:

      Parameter

      Description

      Name

      Specify the name of the new user that you will use for PlateSpin Migrate. For example: PlateSpin Migrate.

      User name

      Specify the user name in the following format:

      <username>@<default_directory>.onmicrosoft.com

      The user must be a member of the Default Directory (federation is not supported). To view the name of the default directory for your account, pause over the Account area in the upper right corner of the Azure portal and view the Domain information related to your Azure administrative account. The default directory name is the first part of the Domain name. For example, if the Azure administrative account is jim@acme.com, the default directory name is acme and the Domain name is acme.onmicrosoft.com.

      For example:

      platespinmigrate@acme.onmicrosoft.com

      Profile

      Not configured

      Properties

      Default

      Groups

      None

      Directory role

      User

      Password

      Click Show Password and note down the auto-generated password provided in the Password box. You need this information to change the password after the account is created.

    6. Click Create to create the new user.

      The newly created user appears in the Users - All Users list.

  2. Log in to the Azure portal as the new user for PlateSpin Migrate and change the user password.

    1. Launch a separate web browser window.

    2. Log in to the Azure portal by using the credentials for the new user for PlateSpin Migrate.

      Use the user name and auto-generated password that you noted when you created the user.

    3. When you are prompted to Update Your Password, specify the auto-generated password, then specify a new secure password.

      You need this new password when you add a Microsoft Azure Location as a migration target in PlateSpin Migrate.

    4. Click Sign In.

    5. After a successful log in, log out of the Azure portal and close this separate browser window.

  3. Continuing your Azure session, assign the Contributor role to the new user for the appropriate Azure Subscription.

    1. Log in to the Azure portal with your Azure user account that you use to manage your subscriptions.

    2. In the Portal sidebar, select All services, then select Subscriptions.

    3. In the list of your subscriptions, select the subscription that you want to use for your migrations.

    4. Copy the Subscription ID value to the clipboard and paste it in a text document where you can access it when you set up the target cloud platforms for this account.

      You must provide the Subscription ID when you add a Microsoft Azure Location as a migration target in PlateSpin Migrate.

    5. In the subscription detail view, select Access control (IAM), select Add, then select Add role assignment to assign a new role for the user.

    6. Specify the following information:

      Parameter

      Description

      Role

      Select Contributor.

      Assign access to

      Select Azure AD user, group, or service principal.

      Select

      Locate the user by typing the first characters in the name, and then select the user.

    7. Click Save.