How to connect Azure Arc "azcmagent connect" non-interactively?

Zambre, Akash 0

The "azcmagent connect" command to connect a machine to Azure expects manual interaction to complete the connection.

Looking at the docs, for non-interactive apps, we can use access-token. Tried that, got the token using "Get-AzAccessToken", but doesn't seem to work.

Any ideas on how to connect non-interactively?

Pranay Reddy Madireddy 1,580 Reputation points Microsoft Vendor

2025-01-28T08:26:02.75+00:00

Hi Zambre, Akash
Just checking in to see if the below answer provided by @Chiugo Okpala helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Pranay Reddy Madireddy 1,580 Reputation points Microsoft Vendor

2025-01-29T10:17:33.3266667+00:00

Hi Zambre, Akash
We haven't heard back from you. Please reply if you have any questions in this matter and we will gladly continue the discussion.

1 answer

Chiugo Okpala 5 Reputation points MVP

2025-01-23T08:48:13.3066667+00:00
Hi Zambre,Akash,

To connect Azure Arc using azcmagent connect non-interactively, you can use a service principal with a secret. Here's an example command:

azcmagent connect --subscription-id "YOUR_SUBSCRIPTION_ID" --resource-group "YOUR_RESOURCE_GROUP" --location "YOUR_REGION" --service-principal-id "YOUR_SERVICE_PRINCIPAL_ID" --service-principal-secret "YOUR_SERVICE_PRINCIPAL_SECRET" --tenant-id "YOUR_TENANT_ID"

Replace the placeholders with your actual subscription ID, resource group, location, service principal ID, service principal secret, and tenant ID[_{{{CITATION{{{_1{azcmagent connect CLI reference - Azure Arc | Microsoft Learn](https://learn.microsoft.com/en-us/azure/azure-arc/servers/azcmagent-connect). For more on this see microsoft documentation [https://learn.microsoft.com/en-us/azure/azure-arc/servers/azcmagent-connect](https://learn.microsoft.com/en-us/azure/azure-arc/servers/azcmagent-connect)
Please sign in to rate this answer.
Zambre, Akash 0 Reputation points

2025-01-23T08:54:22.5133333+00:00

How about using the access-token?

Chiugo Okpala 5 Reputation points MVP

2025-01-23T09:02:09.92+00:00

You can use an access token to connect Azure Arc non-interactively with azcmagent connect. Here's an example command:

azcmagent connect --subscription-id "YOUR_SUBSCRIPTION_ID" --resource-group "YOUR_RESOURCE_GROUP" --location "YOUR_REGION" --access-token "YOUR_ACCESS_TOKEN"

Replace the placeholders with your actual subscription ID, resource group, location, and access token.

For more learning see below:

https://learn.microsoft.com/en-us/azure/azure-arc/servers/azcmagent-connect

Zambre, Akash 0 Reputation points

2025-01-23T09:10:20.18+00:00

I am still getting the web-browser prompt on using the access token -
To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code <code> to authenticate.

Here is the command -

azcmagent connect --resource-group "$resourceGroup" --location "$location" --subscription-id "$subscriptionId" --access-token "$acessToken"

Zambre, Akash 0 Reputation points

2025-01-23T09:12:01.1133333+00:00

I am still seeing the web-browser prompt -

To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code <code> to authenticate.

Command used -

azcmagent connect --resource-group "$resourceGroup" --location "$location" --subscription-id "$subscriptionId" --access-token "$acessToken"

Zambre, Akash 0 Reputation points

2025-01-23T09:14:57.7333333+00:00

Wait, nevermind, I ran the command directly instead of bash script and that worked.

Chiugo Okpala 5 Reputation points MVP

2025-01-23T09:43:31.62+00:00

It seams like the --access-token flag isn't providing the necessary authentication for a non-interactive login. Instead, you should use the --use-device-code flag to generate a device code for authentication.

Here's an updated command:

azcmagent connect --resource-group "$resourceGroup" --location "$location" --subscription-id "$subscriptionId" --use-device-code

This will generate a code that you can use to authenticate via a web browser on another device. Once authenticated, the connection should complete without further prompts.

Chiugo Okpala 5 Reputation points MVP

2025-01-23T16:03:23.88+00:00

Ok cool. Good you were able to resolve the issue from my tips.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to connect Azure Arc "azcmagent connect" non-interactively?

1 answer

Your answer