🔷Microsoft Azure

Installing P0 IAM management on Microsoft Azure takes about 10 minutes.

P0's Azure integration is Generally Available and provides comprehensive access management for your Azure resources.

Overview

This guide walks you through installing and configuring P0's Azure integrations:

• IAM Management for Just‑in‑Time (JIT) access

• SSH access for Azure Virtual Machines via Bastion

Installation summary

Complete the following steps in order. Each step depends on the one before it.

Steps 3 and 4 are only required if you need SSH access for Azure Virtual Machines. If you only need IAM management for JIT access, complete steps 1 and 2.

Step	Page	Purpose	Depends on
1	Azure app registration	Create the service identity P0 uses in your tenant	—
2	IAM management	Enable Just‑in‑Time access to Azure resources	App registration
3	Configure bastion host integration	Set up the Bastion host for secure SSH tunneling	IAM management
4	Install SSH access	Connect P0 to your Azure VMs for SSH access	Bastion host configuration

These steps have strict dependencies. You cannot configure a Bastion host without first completing the app registration and IAM management, and you cannot install SSH access without first configuring a Bastion host.

Before you begin

• Choose one Entra ID directory on which you want to install P0

• Choose at least one subscription on which to install P0.

• Make sure you have the ability to create new app registrations as well as new roles and role assignments. You can do this if you have the Owner role attached to your user.

Get started

Navigate to "Integrations" on p0.app, then select "Azure". You will be prompted to enter the ID of the Entra Tenant you want to install P0 on.

Then proceed to Step 1 — Azure app registration.

IAM assessment (coming soon)

Support for IAM assessment is planned and will appear in the Azure integration when available.