---
title: Configure Storage for Exports (SaaS)
canonical: "https://cloudmonitor.ai/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial/"
description: "Set up the storage account CloudMonitor uses to receive scheduled cost-data exports, with all required permissions."
---

:::tip
For CloudMonitor to receive cost data, the below is required of customers:

1. Create a new **Storage Account** **Resource** to serve as a container for cost data from the Azure Export API.

2. Assign the **Storage Account Contributor Role**  to the CloudMonitor Service Principal.

Proceed for step-by-step instructions.
:::

### Step 1


In Azure Portal, navigate to the [Storage accounts - Microsoft Azure](https://portal.azure.com/#view/HubsExtension/BrowseResource/resourceType/Microsoft.Storage%2FStorageAccounts) and click **"Create"**.

![In Azure Portal, navigate to the Storage accounts - Microsoft Azure and click "Create"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-01.jpeg)

### Step 2


Choose a **Resource Group** in which the new **Storage Account** will be created. We recommend creating a **new Resource Group** for easier management and isolation.

You may select **any subscription**, but the Storage Account **must** be created within the **same Azure tenant (directory)** as the subscriptions and billing accounts that you intend to monitor.

![You may select any subscription, but the Storage Account must be created within the same Azure tenant (directory) as the subscriptions and…](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-02.jpeg)

### Step 3


Name the Storage Account in accordance with your existing organisational tagging standards and naming conventions.

![Name the Storage Account in accordance with your existing organisational tagging standards and naming conventions](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-03.jpeg)

### Step 4


Select the closest Region for you.

![Select the closest Region for you](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-04.jpeg)

### Step 5


Choose **LRS** for storage redundancy, then click **"Advanced"**.

![Choose LRS for storage redundancy, then click "Advanced"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-05.jpeg)

### Step 6


Make sure Hierarchical Namespace is **unticked**. then click **"Review"** and **"Create"**.

![Make sure Hierarchical Namespace is unticked. then click "Review" and "Create"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-06.jpeg)

### Step 7


You will receive a notification for when the Storage Account has been successfully deployed. Click **"Go to resource"** in preparation for the next section.

![You will receive a notification for when the Storage Account has been successfully deployed](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-07.jpeg)

:::tip
Before proceeding to the next set of instructions, we require that the new Storage Account's **Subscription** is registered with the **Microsoft.CostManagementExports** Azure Resource Provider.

This is necessary to use the Export API, without this, CloudMonitor cannot perform cost export operations on the Storage Account in that Subscription.
:::

### Step 8


Navigate to [Subscriptions - Microsoft Azure](https://portal.azure.com/#view/Microsoft_Azure_Billing/SubscriptionsBladeV2) and select the same Subscription the Storage Account will be located in.

![Navigate to Subscriptions - Microsoft Azure and select the same Subscription the Storage Account will be located in](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-08.jpeg)

### Step 9


Click **"Resource providers"**.

![Click "Resource providers"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-09.jpeg)

### Step 10


Filter by and select **"Microsoft.CostManagementExports"** and then click **"Register"**.

![Filter by and select "Microsoft.CostManagementExports" and then click "Register"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-10.jpeg)

### Step 11


You will receive a notification for successfully registering the Resource Provider.

![You will receive a notification for successfully registering the Resource Provider](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-11.jpeg)

:::tip
The next steps will cover how to assign the **Storage Account Contributor Role** to the CloudMonitor Service Principal.

Reason: These roles are needed to create scheduled exports with the Azure Export API.
:::

### Step 12


Navigate to the Storage Account Resource we just created.

![Navigate to the Storage Account Resource we just created](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-12.jpeg)

### Step 13


Navigate to **Access Control (IAM)** and click **"Add > Add role assignment"**.

![Navigate to Access Control (IAM) and click "Add > Add role assignment"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-13.jpeg)

### Step 14


Under the **Role** tab, select **"Storage Account Contributor"** as the Role.

![Under the Role tab, select "Storage Account Contributor" as the Role](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-14.jpeg)

### Step 15


Switch to the **Members** tab, and click **"Select members"**.

![Switch to the Members tab, and click "Select members"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-15.jpeg)

### Step 16


Search and select your **CloudMonitor Service Principal** name.

![Search and select your CloudMonitor Service Principal name](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-16.jpeg)

### Step 17


Switch to the **Review + assign** tab and "Review + assign".

![Switch to the Review + assign tab and "Review + assign"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-17.jpeg)

### Step 18


You will receive a notification for successfully assigning the "Storage Account Contributor" role.

![You will receive a notification for successfully assigning the "Storage Account Contributor" role](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-18.jpeg)

:::tip
Next step is to verify whether "Permitted Scope for Copy Operation" is correct.
:::

### Step 19


Navigate to the Storage Account and Click "Configuration"

![Navigate to the Storage Account and Click "Configuration"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-19.jpeg)

### Step 20


Expand the drop down of "Permitted Scope for Copy Operation" and Click "From any storage account"

![Expand the drop down of "Permitted Scope for Copy Operation" and Click "From any storage account"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-20.jpeg)

### Step 21


Click "Save".

![Click "Save"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-21.jpeg)

:::tip
The next steps will cover the last task — creating a SAS Connection String for the Storage Account.

Reason: Required to grant CloudMonitor secure and limited access to resources in the storage account without exposing the access key.
:::

### Step 22


On the same Storage Account Resource, click **"Shared access signature"**.

![On the same Storage Account Resource, click "Shared access signature"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-22.jpeg)

### Step 23


To ensure secure and minimal access configure the SAS with the following settings:

1. Under **Allowed Services**, check **'Blob'** to restrict access to Blob storage only.
2. For **Allowed Resource Types**, select **'Service', 'Container'** and **'Object'** to permit operations at the service, container and blob level.
3. Choose **Allowed Permissions** **'Read', 'Write', 'Delete', 'List'**, and **'Create'** to exclusively manage blob content within the container.
4. Do not enable any other services or permissions not specified here.

Apply these settings to provide CloudMonitor with the necessary permissions to manage blobs without overextending access rights.

![Apply these settings to provide CloudMonitor with the necessary permissions to manage blobs without overextending access rights](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-23.jpeg)

### Step 24


When setting the SAS expiration, it's advised to **choose a date two years from today** to ensure continued access without frequent renewal.

![When setting the SAS expiration, it's advised to choose a date two years from today to ensure continued access without frequent renewal](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-24.jpeg)

### Step 25


Click **"Generate SAS and connection string"**

![Click "Generate SAS and connection string"](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-25.jpeg)

### Step 26


1. Find the **Blob Service SAS URL** located at the bottom of the page. Copy this URL and store it securely.
2. Also, copy the **URL of this webpage**. It contains the Storage Account Resource ID.

Save this information in a safe place since that information will be required in the next step.

![Save this information in a safe place since that information will be required in the next step](../../../../assets/docs/installing-cloudmonitor/configuring-storage-cloudmonitor-schedule-exports-saas-free-trial-26.jpeg)