...
In your Azure portal, select All services > Microsoft Entra ID
Scroll down the left bar to Manage, open the Properties and search for Tenant ID
Save the Directory Tenant ID for future reference for usage in the import configuration
Get your Subscription ID
If you need specific subscriptions to be imported
In your Azure portal, search for Subscriptions
Select the Subscription(s) you would like to synchronize the Azure (Assets) data from
Save the Subscription ID Id (s) for future reference for usage in the import configuration
...
You need to register an Application that will be used for the API-Gateway(the Azure Registration Application) that works as a gateway that enables the Azure Sync app to access data within your Azure environment. This registration app acts as an intermediary; it has permissions to view or manage certain parts of your Azure setup, but Azure Sync for Jira Assets does not directly access or modify Azure data. The registration app specifies which data the Azure Sync app can import.
In your Azure portal, select All services > Microsoft Entra ID
Under the âAddâ tab, click on App registration (or in the left bar open App registrations and Select New registration)
Pick a name for your application. You can use something like "asset-azure-sync" as inspiration
Leave other settings at default values
Create the App registration
Save the Application (client) ID for future reference for usage in the import configuration
...
Assign Application Role assignment
Granting permissions to the registration app is essential as it defines the scope of data access: what the Azure Sync app can view and manage in Azure.
In your Azure portal, search for Subscriptions
Select your subscription (or more if you want to be able to import data from multiple subscriptions)
Select Access control (IAM) and click on the Role assignments tab
Click Add (you need to have proper permission)
Choose Role = Reader and search at the select for the Application name that you have created in steps above (saying this registered application now can read this subscription data)
...
Check Required Permissions
...
Root object type name
Specify the name of the object type where the imported data will be stored.
Note : Select the Important note : It will automatically generate a new root object type. It's recommended to select a unique name for the root object type. If you attempt to connect the app to an object type already existsthat was created via the Atlassian Assets GUI, it may cause issues errors due to the Atlassian's limitations.
Subscription ID
Note : Only resources registered under the specified subscription will be imported.
Therefore, it's recommended to use a unique name (so a new object is created) or choose an existing object type that was created by this application (such as when performing a prior import with the same root object).
Microsoft Entra ID (Directory Tenant ID)
Application (Client) ID
Application (Client) Secret Key
Subscription Options
In the latest version, you can now enable an option to import resources from all subscriptions that your Azure Registration App has permission to access. This significantly simplifies importing from multiple subscriptions at once.
...
If you prefer to specify subscriptions instead of importing all at once, you can toggle this feature off. Then, simply enter the Subscription ID of the subscription you would like to import data from. If you want to import data from multiple (specific) subscriptions in a single instance, separate them by commas. This makes handling a large number of subscriptions much easier and more efficient.
...
Advanced settings
On separate tab you can modify import parameters not critical for import execution.
...
Scheduler:
Off
Once a day
Using the scheduler, you You can automate imports using the scheduler. When enabled, the import will run automatically once a day, starting approximately 24 hours after the configuration is saved. Or you can take control with manual synchronization for precise adjustments on demand. Scheduler is off by default. The first scheduled trigger typically occurs approximately 5 minutes after the application is deployed, even if imports have not yet been configured at that time. The exact start time for daily imports is not configurable, as triggers are distributed across installations to balance system load. However, after the first trigger, the scheduler will run daily at the same time. If there are multiple scheduled imports, they will not execute simultaneously but rather one by one, with 5-minute delays between them. A maximum of 10 imports can be processed per hour, supporting up to 240 scheduled imports per day. This feature is necessary to comply with Forge limitations and prevent errors. You can also manually synchronize imports at any time for precise control. By default, the scheduler is turned off.
Import options:
Include hidden tags - hidden tags are special tags that are not displayed in Azure Resource view with âhidden-â prefix in tag name. You can toggle import of these here. Defaults to false.
...
See which Object Types or Object Type Attributes have been added, removed, or updated.
Run the schema and mapping update to apply these changes.
Structuring Your Imports in Jira
Depending on your organizationâs needs, you may want to import data from different subscriptions into one shared âroot objectâ within Jira Assets or keep them separated by creating distinct root objects.
Single Root Object: All resources, regardless of the subscription, are imported into a single location within Jira Assets. This works well if itâs not necessary to distinguish resources by environment (e.g., production vs. testing), or to track resources across your organization and have everything in one place.
Separate Root Objects: If itâs essential to differentiate resources for example by environment, you can set up separate root objects within Jira for each subscription (multiple import instances). This setup reduces the risk of data confusion, as each environment is clearly separated in Jira Assets.
Performing the Import
Once you have configured your settings correctly, you should be ready to perform the import process effortlessly. Before the first execution, configured import will be in state âREADY TO RUNâ and âImport dataâ button will appear. To start the import manually, simply click on the button.
...
| Note |
|---|
|
For certain Azure resource types with long attributes by default, this error occurred more frequently, so we decided to implement workarounds.
Currently, the affected resources with attributes where we apply these workarounds are:
IpConfiguration: Id attribute (from v3.15.0):
Id: A shortened version of the Azure Id (used for referencing, type "text").
Full Id: The complete Azure Id (stored as "textarea", which does not have the 254-character limit but cannot be used for referencing).
Note: If you had any IpConfigurations imported from a version prior to 3.15.0 and import them again, they will be treated as "duplicates" (since the Id attribute is being modified, the system sees it as a new object). To resolve this, we recommend bulk-removing all the existing IpConfigurations and then running the import again.
| Note |
|---|
|
If your organization has more than 30 Azure subscriptions, you may encounter restrictions in importing all subscriptions in a single process. While we are actively working on a permanent solution, here are some recommended approaches for managing larger imports.
Workarounds
Use Multiple Import Instances
Specify Individual Subscriptions
Consider running separate import sessions. This can be done by listing up to 30 subscriptions per session in the Subscription IDs configurationinput field.Import âAll Availableâ Subscriptions: Create Additional Azure Registration Apps
Alternatively, you can create multiple Azure registration applications to divide and manage the subscription import process more effectively. Each app can be configured to import a different set of up to 30 subscriptions, reducing manual input and simplifying the import setup (utilizing the "All Available" configuration option)
Resolution Timeline
Our team is aware of this limitation, and a fix to enable larger bulk imports is currently under development. We appreciate your patience and will provide updates as soon as they are available.
Troubleshooting
Assets - Azure Integration requires both Jira and Assets to function. Also make sure all the specific permission in your Azure environment was set right.
...
You might encounter an error (2) when starting the import (1). The first thing to check is whether your license is active, as it is the most common reason. The quickest way to verify this is in the import configuration dialog (3), where a message should appear in such case.
...
Multiple subscription import
...
To import asset data from multiple subscriptions, you need to create separate importer instances with distinct configurations for each subscription (or modify the existing one).
To make the import functional for another subscription, it is necessary to update not only the Subscription ID but also make sure to set correct Application (Client) ID with its Application Secret Key to grant access to subscription resources.
Schema updates
Sometimes it may appear that schema&mapping update (on update tab) is taking too long. The operation might take longer in extreme cases because a retry event is performed there.
Unused Location asset objects
When running the import, all Locations will be imported, including those that are not used or referenced by any resource. This is not an error but a feature, allowing users to view all possible locations (e.g., for cloud infrastructure management, to see available locations where a resource can be deployed).
To display only the Locations that are currently in use (i.e., being referenced), we suggest using a filter within the asset view with the following AQL query:
object HAVING inboundReferences()
...
Feedback and Support
Your invaluable feedback fuels the evolution of Azure Sync for Jira Assets. Share your insights, and together, we'll cultivate a more refined and impactful user experience! 📊🌱
...