# How Does Archera Access My Azure Environment?

## Is my Azure Environment and Data securely accessed?

Archera uses an **app registration** created inside your Azure account to read the Cost and Usage data. The app registration requires access to minimal roles needed to create and read Cost Usage exports.

## Access Scope

The app registration is assigned access at **Tenant Root Group level**, as providing access at this level allows Archera to read resources across all the Subscriptions inside that tenant.

## What We Create

Archera is only concerned with creating (one-time) and reading Cost Exports. We will not be creating any unnecessary resources inside your Azure account.

## Related Resources

* [What information does Archera require to connect to my Azure account?](/help-center/azure-onboarding/technical-onboarding/required-information.md)
* [Azure Onboarding - Required Permissions](/help-center/azure-onboarding/technical-onboarding/required-permissions.md)
* [How Does Archera Access my AWS Environment?](/help-center/security/aws-access.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.archera.ai/help-center/security/azure-access.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.