# How Does Archera Access My Azure Environment?

## Is my Azure Environment and Data securely accessed?

Archera uses an **app registration** created inside your Azure account to read the Cost and Usage data. The app registration requires access to minimal roles needed to create and read Cost Usage exports.

## Access Scope

The app registration is assigned access at **Tenant Root Group level**, as providing access at this level allows Archera to read resources across all the Subscriptions inside that tenant.

## What We Create

Archera is only concerned with creating (one-time) and reading Cost Exports. We will not be creating any unnecessary resources inside your Azure account.

## Related Resources

* [What information does Archera require to connect to my Azure account?](/help-center/azure-onboarding/technical-onboarding/required-information.md)
* [Azure Onboarding - Required Permissions](/help-center/azure-onboarding/technical-onboarding/required-permissions.md)
* [How Does Archera Access my AWS Environment?](/help-center/security/aws-access.md)