# Azure

Use the [Azure](https://azure.microsoft.com/en-us) integration to run [Azure CLI](https://learn.microsoft.com/en-us/cli/azure/) commands as Steps in Workflows.

Torq enables quick and easy integration with Microsoft Azure, so you can automate anything and everything within moments. Torq's public Azure and Azure Blob Steps include:

- Run Commands on Azure CLI.

- Delete File

- Write File

- Check if File Exists

- Read File

If you don't see a Step you need, you can [create your own](https://kb.torq.io/en/articles/9183207-creating-custom-steps-in-torq-automate-anything) in various ways, such as using the **Send an HTTP Request** Step or Torq’s Step Builder, and share it across your organization.

Azure AD Steps use the [Microsoft 365 Steps integration](https://kb.torq.io/en/articles/10287213-microsoft-365).

To use Azure [Steps](https://kb.torq.io/en/articles/9122841-explore-torq-steps-workflow-building-blocks) in Torq Workflows, look [here](#h_124af219d3).

# **Use Azure Steps in Torq**

## **Step one: Create an application in Azure**

1. **Open Microsoft Azure:** Navigate to your [Azure portal](https://portal.azure.com/?bundlingKind=DefaultPartitioner&configHash=PkNJfkTTGDC1&env=portal&l=en.en-us&pageVersion=14.232.2.114.232.0.192030.241204-1800#home) and go to **Azure services >** **Microsoft Entra ID.**

2. **Register a new application:** Go to **Manage > App registrations** and click **New registration** if a relevant app assigned to an Azure resource does not exist.

  1. Enter a unique and meaningful name.

  2. Give the account **Accounts in this organization directory only** access.

  3. Click **Register**.

3. **Assign a role to the application:** In the application, go to **Access control (IAM)** and click **+ Add > Add role assignment**.

  1. In the **Role** tab, select **Privileged administrator roles.**

  2. Select the relevant role for the application. The **Contributor** role is recommended.

  3. Click the **Members** tab and then **+ Select members**.

  4. Search and select the application you created.

  5. Click **Select**.

  6. Click the **Review + assign** tab and review the information before clicking **Review + assign** to finalize the role assignment.

4. **Copy the client and tenant IDs:** Go to the application's **Overview** page and copy both the **Application (client) ID** and **Directory (tenant) ID** to save them for [later](#h_da2d4f233c). You will need them to create the integration in Torq.

![](https://downloads.intercomcdn.com/i/o/eomhaz2o/1665426246/d79467a04d9c853cd7e98dd262b1/Screenshot+2025-08-11+at+11_10_25+copy.png?expires=1793573100&signature=c143ce12a3d4ede7a40c8de58d8084f39d2fbad395bdae129448b353a1199d28&req=dSYhE818m4NbX%2FMW1HO4zdix303xTfWgwULb6XGibgxVJv6T7UmdyJwq22lh%0AMIqw2xnrpGA7FzyUAxk%3D%0A)

## **Step two: Create a client secret in Azure**

1. **Open Certificates & secrets**: In the application, go to **Manage** **> Certificates & secrets**.

2. **Create a client secret**: Select the **Client secrets** tab and click **New client secret**.

  1. Enter a meaningful description/name.

  2. Select an expiration date according to your organization's best practices.

  3. Click **Add**.

3. **Copy the secret:** Copy the client secret **Value** to save it for [later](#h_da2d4f233c). You will need it to create the integration in Torq.

![](https://downloads.intercomcdn.com/i/o/eomhaz2o/1665478695/d48bf107afd7355f2e060f3b4ef9/Screenshot+2025-08-11+at+11_42_39+copy.png?expires=1793573100&signature=179c47339d6734774f417ed95551359c89065b42cfd28cdfc3163f19f5399f35&req=dSYhE815lYdWXPMW1HO4zSNUoge3Pec1IPt9bMgfPLheTHOzxfcJXuTMO2PD%0AIuyPkbNdRmEd9gDaJso%3D%0A)

## **Step three: Create an Azure Steps integration in Torq**

1. **Navigate to the integration:** In Torq, go to **Build > Integrations > Steps > Azure** and click **Add Instance**.

2. **Configure the integration:**

  1. Enter a meaningful name for the integration.

  2. Paste the tenant ID you copied [earlier](#h_841120500a).

  3. Paste the client ID you copied [earlier](#h_841120500a).

  4. Paste the client secret you generated [earlier](#h_66bbb67563).

3. **Finalize:** Click **Add**.

![](https://downloads.intercomcdn.com/i/o/eomhaz2o/1665481781/2d3fe1aa7f90d16439781385a37b/Screenshot+2025-08-11+at+11_46_44.png?expires=1793573100&signature=fd185d5660497d3117c46acdacc6f4a0ec3f8f8b3dfd3e88230e19031dcbdd05&req=dSYhE812nIZXWPMW1HO4zS2x9RfoVu8zgIiknhy3LqV8gepd0vSQ363JQBYx%0AEz9oWIEXu2sANRHc9Zs%3D%0A)

# **Use Microsoft Azure Blob Storage Steps in Torq**

To use Blob Storage Steps in Torq Workflows, you must first create an application in Entra ID and an [Azure Steps integration](#h_da2d4f233c) in Torq.

1. **Open Microsoft Azure:** In your [Azure portal](https://portal.azure.com/?bundlingKind=DefaultPartitioner&configHash=PkNJfkTTGDC1&env=portal&l=en.en-us&pageVersion=14.232.2.114.232.0.192030.241204-1800#home), go to **Navigate** and  click **Subscriptions**, **Resource groups**, or **All resources**.

2. **Select a container or service:** Select the subscription, resource group, or other resource that should have access to the application with the relevant Blob Storage.

3. **Assign a role:** In the subscription, resource group, or resource, go to **Access control (IAM)** and click **+ Add > Add role assignment**.

  1. In the **Role** tab, select a relevant role**.**

  2. Click  the **Members** tab and then **+ Select Members.**

  3. Search and select the enterprise application you created for the Azure Steps integration.

  4. Click **Select**.

  5. Click the **Review + assign** tab and review the information before clicking **Review + assign** to finalize the role assignment.

You can now use Microsoft Azure Blob Storage Steps in Torq Workflows to interact with your Azure Blob Storage accounts.

---

# **Templates**

Now that you've added your integration, check out these specially crafted templates by Torq's security experts. Visit Torq's [template library](https://app.torq.io/templates?) for more.

- [Collect Azure Network Security Group Details](https://app.torq.io/templates?id=d788498d-2d95-4504-b333-dca4e33f5788)

- [Collect Azure VM and Network Details](https://app.torq.io/templates?id=498a135d-d309-4b0e-b198-18eb3e6932f9)

- [Handle Wiz Alert for Public Azure Container with Sensitive Data](https://app.torq.io/templates?id=6a3761c1-75ce-44e1-bf11-fa96a0c9971d)

​