---
title: "Connecting Microsoft Azure Compute Accounts"
description: "If you plan to execute custom scripts inside Microsoft Azure machines managed by a Veeam Backup & Replication server connected to Orchestrator, you must configure a direct connection to the Microsoft Azure compute account (Microsoft Entra ID applicat"
canonical: "https://helpcenter.veeam.com/docs/vro/userguide/connecting_azure_servers.html"
breadcrumb: "User Guide > Configuring Veeam Recovery Orchestrator > Connecting Infrastructure > Connecting Microsoft Azure Compute Accounts"
dateModified: "2026-08-26"
---

# Connecting Microsoft Azure Compute Accounts

If you plan to [execute custom scripts](adding_custom_scripts.md) inside Microsoft Azure machines managed by a Veeam Backup & Replication server connected to Orchestrator, you must configure a direct connection to the Microsoft Azure compute account (Microsoft Entra ID application) added to this server. To do that:

1. Switch to the **Administration** page.
2. Navigate to **Infrastructure** > **Azure**.
3. Select the compute account and click **Configure connection**.
4. In the **Configure Direct Connection to Azure** window, do the following:

   1. Set the **Direct connection** toggle to *On*.
   2. Use either of the following options:

      - If you want to use password-based authentication, select the **Secret** option and provide the value of a client secret created for the application as described in [Microsoft Docs](https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal#option-2-create-a-new-application-secret).

        Keep in mind that you can copy this value only when creating client secrets.

      - If you want to use certificate-based authentication, select the **Certificate** option, click **Browse**, locate a certificate obtained from a Certificate Authority (CA), and provide a password for this certificate. 

      For more information on different types of Microsoft Azure authentication, see [Microsoft Docs](https://learn.microsoft.com/en-us/entra/identity-platform/howto-create-service-principal-portal#set-up-authentication).

   3. Click **Save**. 

::: tip

By default, Orchestrator automatically verifies connections to Microsoft Azure compute accounts once a day to ensure that the provided certificates and client secret values are valid. To do that manually, select the necessary connection and click **Check connection**.

:::

[![Connecting Microsoft Azure Server](images/configuring_azure.png "Connecting Microsoft Azure Server")](images/configuring_azure.png){.toggle scale=55}