Connecting with Azure storage

See how you can add your Microsoft Azure credentials to connect your own Azure buckets to your datasets on Mindkosh.

To connect your Azure storage with Mindkosh and add data, you first need to add your Azure credentials.

Creating credentials for Azure

The recommended method to connect your storage with Mindkosh is through the use of Azure Active Directory (also called Azure Entra ID). To create credentials you need to do the following:

1. Create a resource group if you don't already have one. Follow the steps outline here.

2. Create a storage account, if you don't already have one. You can follow the steps here.

3. Create a storage container, where your data will be stored. Follow the steps here.

4. Create a service user via Azure active directory by registering a new app. Here is a guide to doing this.

   1. Once the app is registered, you can create credentials to access it. We need the following tokens to access your storage data, so please keep them handy for the next steps.

      1. client-id

      2. client-secret

      3. tenant-id

         
5. Assign role based access policy for the user which includes access to relevant buckets. You can learn more about various ways in which you can do this here. For example, if you want to grant access at the container level:

   1. Go to the storage container

   2. Go to the IAM section from left sidebar

   3. Click on Add role assignment

   4. Add the role Storage Blob Data Reader and the application created above

Setting CORS

In order to enable the browser to directly fetch the files from your cloud storage, you will need to set the right CORS policy on the bucket, so the browser does not block loading the files. Here is how you can do it for a container on Azure.

1. Go to the container page

2. Go to the CORS page in the Settings section in the left sidebar

3. Set the following values

   1. Allowed origins : app.mindkosh.com

   2. Allowed methods: GET

   3. Allowed headers: *

   4. Exposed headers: content-length

   5. Max-age: 120

Add credentials to Mindkosh

Only organization admins can add cloud storage credentials on Mindkosh

With the permissions setup, we are now ready to add the credentials to Mindkosh. To add cloud storage credentials, go to the Organization page from the left sidebar on Mindkosh.

Click on the Manage Keys button in the MS Azure section, and enter the following keys in the appropriate boxes:

1. client-id

2. client-secret

3. tenant-id

Once the credentials are setup, you can create a dataset to add data from your storage. Checkout the steps mentioned here to do this.