The following details & permissions of the Azure environment are needed to configure the

• Azure tenant and the subscription.

• Azure resource group created and identified, or sufficient privileges in the subscription to create the resource group.

• Sufficient privileges to create and configure an Azure Relay in a new or existing resource group. Azure Relay should be created in the azure tenant for the cloud gateway to be configured. You can follow Create a namespace in the Azure portal docs instructions.

• Hybrid Connection is created in Azure Relay. Please follow the instructions to Create a hybrid connection.

• Sufficient privileges to create an App Registration and a client secret for use by EmpowerID.

• Sufficient privileges to assign the App Registration Service Principal the "Contributor" role to the Hybrid Connection. Please ensure the App Registration is done and the appropriate role is assigned to the Hybrid Connection.