Page Comparison

...

1. Create an Azure Function app with the following general configuration settings: Select .NET Core 3.1 as the runtime stack

   • Platform – 32 bit

   • Managed pipeline version – Integrated

   • FTP state – All allowed

   • HTTP version – 1.1

   • Web sockets – Off

   • Remote Debugging – Off

   • Client certificate mode – Ignore

   • Runtime version – 3

2. Turn on system managed identity for the app service and download the publish profile from the overview blade.Open Workflow Studio and from Cloud Explorer, deploy the SharePoint Online Inventory function

3. In EmpowerID, do the following to publish the Azure Function to Azure:

   1. Navigate to Azure License Manager > Configuration > Tenants Tab and click the Publish Azure App Service action to start the AzPublishMsAppToAppService workflow.

   2. For Application Type, select Azure Functions and click Submit.

   3. Search for and select SPO Inventory Functions and click Submit.

   4. Select the publish profile file for the Function app you downloaded from Azure and then click Submit.

   5. Confirm that you want to publish the function.

   6. Click OK to close the publish message.

4. In Azure, create an Azure Key Vault for SPO inventory and store the secret created for the service principal configured earlier. Name the secret AzGeneralServiceAuthSecret.

5. Create an access policy for the key vault with the following settings:

   • Key permissions

     • Get

     • Decrypt

     • Unwrap

     • Verify

   • Secret permissions

     • Get

     • List

     • Set

     • Delete

     • Purge

   • Service principal – Azure Function app

6. Add the following config settings to the Azure Function app service:

   • AzureWebJobsDashboard – Connection string of any storage account in that tenant

   • AzureWebJobsStorage – Connection string of any storage account in that tenant

   • AzureGeneralServiceConfigGetByIDUrl – <Azure general service app service Url>/app/config/GetById/>

   • AzureGeneralServiceAuthVaultUrl – Vault URL of the key vault created in the above step.

   • AzureGeneralServiceAuthKeyvaultSecretName – The name of the secret that was created in the above step.

   • AzureGeneralServiceAuthClientID – Client ID of the service principal which is configured for authorization of Azure general app service.

   • ConfigSettingsID – Config settings ID created earler.

   • AzureGeneralServiceAuthTenantID – Tenant ID of this tenant

   • AzureGeneralServiceMultitenantValidateSKeyUrl – <Azure general service app service Url>/app/multitenant/IsSubscriptionValid/

...