Add Azure Account: CANNOT ADD Subscription Status

Background

In order for the Azure AD subscription ID to add to FortiCNP, the Subscription ID needs to provide the minimum read access to FortiCNP thus letting FortiCNP to be able to read the resources under the Subscription. If the subscription was not created by the master account or if it was not assigned with a role, it will be shown as CANNOT ADD status on FortiCNP. Please follow the steps below to add Reader, Owner, or User Access Administrator role to the Subscription.

1. From Azure console page, search and click on Subscriptions.
2. Click on the Subscription that is shown as CANNOT ADD status on FortiCNP.
3. In the Subscription menu, click on Access control (IAM).

'

4. Click on + Add and select Add role assignment.
5. In Add role assignment , search and select Reader, Owner, or User Access Administrator, then click Next.



6. In Members tab, leave Assign access to as "User, group, or service principal", then click +Select members.



7. In Select field, search and select a member (user account) that will be associated with the role.

The member (user account) should have a Global Administrator role or Cloud Application Administrator + Global Reader roles as stated in Role Requirement.

8. Click Review + Assign to finish creating the Reader role.