🔷Microsoft Azure

Install P0 IAM management on Microsoft Azure in about 10 minutes. Configure just-in-time access and privilege governance for your Azure environment.

P0's Azure integration is Generally Available and provides comprehensive access management for your Azure resources.

Overview

This guide walks you through installing and configuring P0's Azure integrations:

• IAM Management for Just‑in‑Time (JIT) access

• SSH access for Azure Virtual Machines via a Bastion host or custom jump host

Installation summary

Complete the following steps in order. Each step depends on the one before it.

Steps 3 and 4 are only required if you need SSH access for Azure Virtual Machines. If you only need IAM management for JIT access, complete steps 1 and 2.

Step	Page	Purpose	Depends on
1	Azure app registration	Create the service identity P0 uses in your tenant	-
2	IAM management	Enable Just‑in‑Time access to Azure resources	App registration
3	Configure bastion host integration	Set up how P0 connects to your VMs: an Azure Bastion host or a custom jump host	IAM management
4	Install SSH access	Connect P0 to your Azure VMs for SSH access	Bastion host configuration

These steps have strict dependencies. You cannot configure a Bastion host without first completing the app registration and IAM management, and you cannot install SSH access without first configuring a Bastion host.

Prefer infrastructure as code? You can install every step with the P0 Terraform provider instead of the dashboard. Each step's page includes a Manage with the P0 Terraform provider section with the corresponding resource.

Before you begin

• Choose one Entra ID directory on which you want to install P0

• Choose at least one subscription on which to install P0.

• Make sure you have the ability to create new app registrations as well as new roles and role assignments. You can do this if you have the Owner role attached to your user.

Get started

Navigate to "Integrations" on p0.app, then select "Microsoft Azure". You are prompted to enter the ID of the Entra Tenant you want to install P0 on.

Then proceed to Step 1: Azure app registration.

IAM assessment (beta)

IAM assessment is available in beta. It lets P0 assess and analyze Azure role assignments, permissions, and resource access for security compliance. Install it from the IAM assessment component in the Azure integration on p0.app.

Jump host management (beta)

Jump host management is available in beta. It lets P0 send privileged commands, such as terminating a live SSH session, to jump host VMs in your tenant through a connector Function App. See Jump host management to configure it.