Create an Azure connection to an Edge or Collibra Cloud site

After you install an Edge site or are granted a Collibra Cloud site, you can create a connection to the Azure platform.

Do you use a vault?

You can use a vault to add your data source information to your Edge site connection.

Check the connection property table below to see which information is available for your vault.

Vaults are not available for Collibra Cloud sites.
No vault
AWS Secrets Manager
Azure Key Vault
CyberArk Vault
Google Secret Manager
HashiCorp Vault
  
To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the query value to identify the secret in your vault.
    Example 
    Note The Query must be a string containing the properties required to identify the secret. Each property must be separated by a semicolon (;). For example: Safe=<SafeName>;Folder=<FolderName>;Object=<ObjectName>

    If a property is a folder with sub-folders, use a backslash (\) to define the folder path. For example: Folder=Root\Top Secrets\More Secrets

    For more information about query formats and supported properties, go to the CyberArk Credential Provider documentation.

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Secret Engine Type
    Select one of the following:
    • Key Value
    • Database
    Engine Path
    The engine path to your vault where the value is stored.
    Secret Path
    The secret path to your vault where the value is stored.
    Field
    If your Secret Engine Type is Key Value, enter the name of the field to your vault where the value is stored.
    Role
    If your Secret Engine Type is Database, enter the role specified in the Database engine.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Vault Name
    The name of your Azure Key Vault in your Azure Key Vault service where the value is stored.
    Secret Name
    The name of the secret in your vault where the value is stored.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the required information:
    Secret Name
    The name of the secret in your vault where the value is stored.
    Field
    If the secret stored in your AWS Secrets Manager is a JSON value, for example {"pass1": "my-password", "pass2": "my-password2"}, then you need to specify the Field to point to the exact JSON value that should be used. For example, Secret Name: edge-db-customer; Field: pass.
    Note If the secret stored in your AWS Secrets Manager is a plain string value, for example my-password, then you do not need to specify the Field.
    Example 

To use your vault, do the following:
  1. In the Value Type field, select Vault Key.
  2. Enter the name of the secret in your vault where the value is stored.
    Example 

Prerequisites

In your Collibra environment

In your Azure AI environment

To integrate Azure AI Foundry assets, ensure the following

In your Dataverse environment

To integrate Microsoft Copilot Studio agents, the Azure AI Foundry integration connects to your Dataverse environments with a service principal. This is a registered application in Microsoft Entra ID that has read-only access to each Dataverse environment from which you want to integrate assets. Only Dataverse environments in the Microsoft public (commercial) cloud are supported. Sovereign clouds such as US government (GCC High and DoD) and China aren't supported.

If you already have an Azure connection configured for Azure AI Foundry, you can reuse the same app. Ensure that it has the Dataverse permissions in addition to its existing Azure permissions.

  1. Register an app in Microsoft Entra ID and create a client secret. Enter its tenant ID, client ID and client secret in the Azure connection. For more information, go to the Microsoft documentation.
  2. Create a read-only security role in each Dataverse environment from which you want to integrate Microsoft Copilot Studio agents. Grant it the Read privilege on the Bot and Botcomponent tables at the Organization level. Use the Organization level for Read, a lower level hides agents that the app doesn't own. For more information, go to the Microsoft documentation.
  3. Add the app as an application user in each environment and assign it the read-only security role you created in step 2. For more information, go to the Microsoft documentation on managing application users and assigning security roles.

Steps

  1. Open a site.
    1. On the main toolbar, click Products icon → Cogwheel icon Settings.
      The Settings page opens.
    2. In the tab pane, click Edge.
      The Sites tab opens and shows a table with an overview of your sites.
    3. In the table, click the name of the site whose status is Healthy.
      The site page opens.
  2. In the Connections section, click Create connection.
    The Create connection page appears.
  3. Select the Azure connection to connect to Azure.
  4. Enter the required information.
    FieldDescriptionRequiredAvailable for vaults?
    Name

    The name of the Edge or Collibra Cloud site connection for Azure.

    		 Yes No
    Description

    The description of the connection.

    		 No No
    Vault The vault where you store your data source values. No No
    Service Principal ID

    The Application account ID to connect to the Azure.
    For information on the Azure Service Principal user and the Application ID, go to the Azure documentation.

    		 Yes Yes
    Service Principal Secret

    The application secret for the Service Principal.
    For information on the application secret value, go to the Azure documentation.

    		 Yes Yes
    Tenant ID

    The Tenant ID of your Azure Active Directory.
    For information on the Directory (tenant) ID, go to the Azure documentation.

    		Yes Yes
  5. Click Create.
    The connection is added to the Edge or Collibra Cloud site.

What's next

You can now add the Azure AI Foundry capability to an Edge or Collibra Cloud site.