Compute Accounts

New
(select the Create a new account option at the Subscription step of the wizard)

The Microsoft Entra ID user account where the application will be created must have the following permissions:

• To register applications. For this, you can assign the Global Administrator role to the user, or enable the Users can register applications option for the user in the Azure portal. For details, see Microsoft Azure Docs.
• To assign a role on the subscription level for the registered application. For this, you can use the Owner* role or if the Owner role cannot be used, you can create a custom role with minimal permissions. To learn how to create a custom role, see Creating Custom Role for Azure and Azure Stack Hub Accounts.

* — When you assign a privileged role, like Owner, using the Azure Portal, the default conditions can be added to this role assignment. With these default conditions, adding the Compute account will fail. To avoid this issue, select the Allow user to assign all roles (highly privileged) option. For more information on conditions, see Microsoft Docs.

Existing
(select the Use the existing account option at the Subscription step of the wizard)

The application must have the Contributor role for the selected subscription. If you restore workloads to Microsoft Azure Stack Hub and cannot use the Contributor role, you can create a custom role with minimal permissions. To learn how to create a custom role, see Creating Custom Role for Azure and Azure Stack Hub Accounts.