Connect Azure Account
Azure connects via OAuth. No API keys to manage -- just sign in with Microsoft and authorize.
Prerequisites
- Active Azure subscription with billing enabled
- Owner or Contributor role on the subscription
- Azure AD (Entra ID) access
Connect via OAuth
- Go to Settings > Cloud Accounts > Add Account
- Click Microsoft Azure under One-Click Connect
- Sign in with your Azure account in the popup
- Review the permissions (Azure Service Management -
user_impersonation) - Click Accept
You're redirected back to OEC.sh. The account shows Active with Compute, Storage, and DNS badges.
If you see "Admin consent required", your Azure AD admin needs to approve OEC.sh in Enterprise Applications first.
Permissions Requested
| Scope | Purpose |
|---|---|
https://management.azure.com/user_impersonation | Manage VMs, storage, DNS |
offline_access | Auto-refresh tokens without re-login |
Subscription Requirements
Your subscription needs these resource providers registered (Azure Portal > Subscriptions > Resource providers):
Microsoft.Compute(Virtual Machines)Microsoft.Storage(Storage Accounts)Microsoft.Network(Networking)
The connecting account needs Owner or Contributor role on the subscription.
Using Your Azure Account
Servers -- Go to Servers > Add Server > Provision from Cloud. Pick subscription, region (e.g., East US), and VM size (e.g., Standard_B2s).
Backups -- Go to Settings > Storage > Quick Setup. Select or create a Storage Account and Blob container.
DNS -- Go to Settings > DNS Providers > Quick Setup. Select an Azure DNS zone.
Token Management
OAuth tokens refresh automatically. If the account shows issues, click the refresh icon. If that fails (e.g., password changed, MFA reset), click Reconnect and re-authorize.
To fully disconnect: delete the account in OEC.sh, then optionally revoke access in Azure AD > Enterprise Applications.
Azure Regions
| Region | Location |
|---|---|
eastus | East US (Virginia) |
westus2 | West US 2 (Washington) |
westeurope | West Europe (Netherlands) |
northeurope | North Europe (Ireland) |
southeastasia | Southeast Asia (Singapore) |
australiaeast | Australia East (Sydney) |
Troubleshooting
"Authorization Denied" -- You clicked Deny or closed the window. Try again from Add Account.
Account shows "Expired" -- Password change or MFA reset invalidated the token. Click Reconnect.
"No subscriptions found" -- The Azure account has no subscriptions, or you lack Owner/Contributor access.
VM creation fails -- Check subscription quotas (Usage + quotas), try a different region, and make sure Microsoft.Compute is registered.
Storage access denied -- Check the Storage Account's network rules. You may need to allow access from all networks or add OEC.sh IPs.
Cost Notes
| Resource | Billing |
|---|---|
| Virtual Machines | Per-hour based on VM size |
| Storage Accounts | Per GB + transactions |
| Azure DNS | Per zone/month + queries |
| Data Transfer | Outbound charges |