# How Does Archera Access My Azure Environment?

## Is my Azure Environment and Data securely accessed?

Archera uses an **app registration** created inside your Azure account to read the Cost and Usage data. The app registration requires access to minimal roles needed to create and read Cost Usage exports.

## Access Scope

The app registration is assigned access at **Tenant Root Group level**, as providing access at this level allows Archera to read resources across all the Subscriptions inside that tenant.

## What We Create

Archera is only concerned with creating (one-time) and reading Cost Exports. We will not be creating any unnecessary resources inside your Azure account.

## Related Resources

* [What information does Archera require to connect to my Azure account?](https://docs.archera.ai/help-center/azure-onboarding/required-information)
* [Azure Onboarding - Required Permissions](https://docs.archera.ai/help-center/azure-onboarding/required-permissions)
* [How Does Archera Access my AWS Environment?](https://docs.archera.ai/help-center/security/aws-access)