Before setting up the environment, gather the following details to ensure proper configuration:
- Region & Availability Zones
- Choose the Azure region where resources will be deployed (e.g., East US, West Europe).
- Decide on Availability Zones. While Quix supports multiple AZs, we generally advise against it to reduce complexity and cost.
- Networking & CIDR Ranges
- Identify any existing virtual networks (VNets) that this environment needs to peer with.
- Define the primary CIDR range for this environment (e.g.,
10.1.0.0/19) that do not overlap with existing networks.
- If overlapping CIDR range is chosen, communication channels can still be set up, but will be more involved.
Before proceeding, you must add our account to your Entra tenant. Azure RBAC roles can only be assigned to users who exist in your Entra ID.
Quick Link: Invite new Entra tenant member as Guest
Steps:
- Go Azure Portal: https://portal.azure.com/
- Search for
Microsoft Entra Id
- Click
+ Add (top bar, left), User > Invite External User
- Set email to
[email protected]
- Finalise the rest of the optional details and invite
Setup
- Create a new subscription through your internal procurement process, choosing a billing model that fits your company’s preferences.
Steps:
- Go to the Azure Portal: https://portal.azure.com/
- Search for
Subscriptions
- Click
+ Add (top bar, left)
- Specify subscription details
- Create
- Assign RBAC permissions to our tenant user
Steps:
- Go Azure Portal: https://portal.azure.com/
- Search for
Subscriptions
- Select the newly created subscription
Access Control (IAM) (left menu)
- Click
+ Add (top bar, left), Add role assignment
- Select
Privileged administrator roles
- Select
Owner
- Next
+ select Members
- find
[email protected], Select
- Next
- Tick
Allow user to assign all roles except privileged administrator roles Owner, UAA, RBAC (Recommended) option
- Next, Review & Assign
<aside>
🚨
Once permissions are assigned, please confirm with us so we can begin the setup process. Also send us the gathered details asked at the beginning of this guide.
- Account Id
- Region / AZ
- CIDR range
</aside>
Use our Terraform modules to install the required infrastructure
Terraform modules:
Learn how to use them:
Frequently Asked Questions
Access & Permissions
Q: Can I assign the Contributor role instead of Owner?
A: No, Contributor does not grant permission to assign roles for Azure Managed Identities, which is required for our setup.