Skip to main content

Azure integration

Seqera Platform integrates with Azure to run pipelines on Azure Batch and Azure Cloud, and to read input/output data from Azure Blob Storage. This page is the entry point for the Azure-side setup.

Setup checklist

StepWhat to doPage
1Create a custom role and register an Entra application (service principal)Roles & service principals
2Create or identify a Storage account and Blob container for the work directoryStorage access
3(Azure Batch only) Create a Batch account and decide on credential typeRoles & service principals
4Add the credentials to SeqeraCredentials
5(Manual Batch only) Create Azure Batch pools and resources by handAzure Batch manual setup
6Create the compute environmentAzure Batch or Azure Cloud

Choose a credential type

Azure supports two credential types:

  • Access keys — Long-lived keys for the Storage and Batch accounts. Simple but limited (no VNet/subnet, two keys per account, broad access).
  • Entra service principals (recommended) — Role-based access control via a registered application in Microsoft Entra ID. Required for VNet/subnet configuration. Optionally pair with a managed identity attached to the Batch pool for the most secure setup.

Both credential types support Batch Forge and Manual compute environments.

Choose a compute environment type

Compute environmentWhen to use itCredential model
Azure BatchProduction-scale pipelinesAccess keys or Entra service principal
Azure Cloud (preview)Studios and small/medium pipelines, simplified setupEntra service principal only

For Azure Cloud, see the dedicated custom role JSON in Roles & service principals.