azure access.md
How Does Archera Access My Azure Environment?
Is my Azure Environment and Data securely accessed?
Archera uses an app registration created inside your Azure account to read the Cost and Usage data. The app registration requires access to minimal roles needed to create and read Cost Usage exports.
Access Scope
The app registration is assigned access at Tenant Root Group level, as providing access at this level allows Archera to read resources across all the Subscriptions inside that tenant.
What We Create
Archera is only concerned with creating (one-time) and reading Cost Exports. We will not be creating any unnecessary resources inside your Azure account.