--- title: Configure Storage for Exports (CSP) canonical: "https://cloudmonitor.ai/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only/" description: CSP-only walkthrough for setting up the storage account CloudMonitor uses to schedule cost-data exports when the install spans different customer tenants. --- This scribe is only for CSP customers which install Cloudmonitor in different tenants. :::tip For CloudMonitor to receive cost data, the below is required of customers: 1. Create a new **Storage Account** **Resource** to serve as a container for cost data from the Azure Export API. 2. Assign the **Storage Account Contributor Role** to the CloudMonitor Service Principal. Proceed for step-by-step instructions. ::: ### Step 1 In Azure Portal, navigate to the [Storage accounts - Microsoft Azure](https://portal.azure.com/#view/HubsExtension/BrowseResource/resourceType/Microsoft.Storage%2FStorageAccounts) and click **"Create"**. ![In Azure Portal, navigate to the Storage accounts - Microsoft Azure and click "Create"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-01.jpeg) ### Step 2 Select a Resource Group in which to create the new Storage Account. We recommend setting up a new Resource Group. If you are a NonCSP Customer, the chosen Subscription **MUST** be in the same Subscription as the CloudMonitor Engine. If you are a CSP Customer, your Customer may choose any Subscription, the new Storage Account **MUST** be created in their tenancy. ![If you are a CSP Customer, your Customer may choose any Subscription, the new Storage Account MUST be created in their tenancy](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-02.jpeg) ### Step 3 Name the Storage Account in accordance with your existing organisational tagging standards and naming conventions. ![Name the Storage Account in accordance with your existing organisational tagging standards and naming conventions](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-03.jpeg) ### Step 4 To avoid paying egress fees select the **same** region that contains the CloudMonitor engine. ![To avoid paying egress fees select the same region that contains the CloudMonitor engine](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-04.jpeg) ### Step 5 Choose **LRS** for storage redundancy, then click **"Advanced"**. ![Choose LRS for storage redundancy, then click "Advanced"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-05.jpeg) ### Step 6 Make sure Hierarchical Namespace is **unticked**. then click **"Review"** and **"Create"**. ![Make sure Hierarchical Namespace is unticked. then click "Review" and "Create"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-06.jpeg) ### Step 7 You will receive a notification for when the Storage Account has been successfully deployed. Click **"Go to resource"** in preparation for the next section. ![You will receive a notification for when the Storage Account has been successfully deployed](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-07.jpeg) :::tip Before proceeding to the next set of instructions, we require that the new Storage Account's **Subscription** is registered with the **Microsoft.CostManagementExports** Azure Resource Provider. This is necessary to use the Export API, without this, CloudMonitor cannot perform cost export operations on the Storage Account in that Subscription. ::: ### Step 8 Navigate to [Subscriptions - Microsoft Azure](https://portal.azure.com/#view/Microsoft_Azure_Billing/SubscriptionsBladeV2) and select the same Subscription the Storage Account will be located in. ![Navigate to Subscriptions - Microsoft Azure and select the same Subscription the Storage Account will be located in](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-08.jpeg) ### Step 9 Click **"Resource providers"**. ![Click "Resource providers"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-09.jpeg) ### Step 10 Filter by and select **"Microsoft.CostManagementExports"** and then click **"Register"**. ![Filter by and select "Microsoft.CostManagementExports" and then click "Register"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-10.jpeg) ### Step 11 You will receive a notification for successfully registering the Resource Provider. ![You will receive a notification for successfully registering the Resource Provider](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-11.jpeg) :::tip The next steps will cover how to assign the **Storage Account Contributor Role** to the CloudMonitor Service Principal. Reason: These roles are needed to create scheduled exports with the Azure Export API. ::: ### Step 12 Navigate to the Storage Account Resource we just created. ![Navigate to the Storage Account Resource we just created](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-12.jpeg) ### Step 13 Navigate to **Access Control (IAM)** and click **"Add > Add role assignment"**. ![Navigate to Access Control (IAM) and click "Add > Add role assignment"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-13.jpeg) ### Step 14 Under the **Role** tab, select **"Storage Account Contributor"** as the Role. ![Under the Role tab, select "Storage Account Contributor" as the Role](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-14.jpeg) ### Step 15 Switch to the **Members** tab, and click **"Select members"**. ![Switch to the Members tab, and click "Select members"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-15.jpeg) ### Step 16 Search and select your **CloudMonitor Service Principal** name. ![Search and select your CloudMonitor Service Principal name](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-16.jpeg) ### Step 17 Switch to the **Review + assign** tab and "Review + assign". ![Switch to the Review + assign tab and "Review + assign"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-17.jpeg) ### Step 18 You will receive a notification for successfully assigning the "Storage Account Contributor" role. ![You will receive a notification for successfully assigning the "Storage Account Contributor" role](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-18.jpeg) :::tip Next step is to verify whether "Permitted Scope for Copy Operation" is correct. ::: ### Step 19 Navigate to the Storage Account and Click "Configuration" ![Navigate to the Storage Account and Click "Configuration"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-19.jpeg) ### Step 20 Expand the drop down of "Permitted Scope for Copy Operation" and Click "From any storage account" ![Expand the drop down of "Permitted Scope for Copy Operation" and Click "From any storage account"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-20.jpeg) ### Step 21 Click "Save". ![Click "Save"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-21.jpeg) :::tip The next steps will cover the last task — creating a SAS Connection String for the Storage Account. Reason: Required to grant CloudMonitor secure and limited access to resources in the storage account without exposing the access key. ::: ### Step 22 On the same Storage Account Resource, click **"Shared access signature"**. ![On the same Storage Account Resource, click "Shared access signature"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-22.jpeg) ### Step 23 To ensure secure and minimal access configure the SAS with the following settings: 1. Under **Allowed Services**, check **'Blob'** to restrict access to Blob storage only. 2. For **Allowed Resource Types**, select **'Service', 'Container'** and **'Object'** to permit operations at the service, container and blob level. 3. Choose **Allowed Permissions** **'Read', 'Write', 'Delete', 'List'**, and **'Create'** to exclusively manage blob content within the container. 4. Do not enable any other services or permissions not specified here. Apply these settings to provide CloudMonitor with the necessary permissions to manage blobs without overextending access rights. ![Apply these settings to provide CloudMonitor with the necessary permissions to manage blobs without overextending access rights](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-23.jpeg) ### Step 24 When setting the SAS expiration, it's advised to **choose a date two years from today** to ensure continued access without frequent renewal. ![When setting the SAS expiration, it's advised to choose a date two years from today to ensure continued access without frequent renewal](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-24.jpeg) ### Step 25 Click **"Generate SAS and connection string"** ![Click "Generate SAS and connection string"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-25.jpeg) ### Step 26 1. Find the **Blob Service SAS URL** located at the bottom of the page. Copy this URL and store it securely. 2. Also, copy the **URL of this webpage**. It contains the Storage Account Resource ID. 3. Finally, send the copied information to our team via [live chat](#chatbox) and confirm that you have completed this Helpdesk Article. ![Find the Blob Service SAS URL located at the bottom of the page. Copy this URL and store it securely. 2](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-csp-customers-only-26.jpeg) :::danger Next Step: [Step 4: Raise a Support Ticket : CloudMonitor Helpdesk](https://cloudmonitor.ai/docs/installing-cloudmonitor/step-4-raise-support-ticket/) :::