Onaro™ONARO

Documentation / Integrations / Azure OpenAI

Azure OpenAI connector

Connect Azure Cost Management credentials to pull Azure OpenAI spend.

AvailableMethod: API

Overview

Connect Azure Cost Management credentials to pull Azure OpenAI spend.

Data pulled

  • Daily spend from Azure Cost Management for Azure OpenAI
  • Token and request counts are not provided by this path (recorded as zero)
  • Persisted as source_type=api_sync

What gets attributed

Meridian queries Azure Cost Management for your subscription, or only the resource group you enter, filtered to Azure OpenAI and Cognitive Services, and stores one cost total per day. It does not read resource tags, deployment names or resource groups from the results, so it cannot split that total by agent or team.

Every Azure OpenAI row arrives unattributed in the attribution inbox (Agents & allocation → Unattributed), where you can assign it or create a vendor rule.

Authentication & credential storage

Meridian stores the following fields for this connector (values encrypted at rest):

  • subscription_id
  • tenant_id
  • client_id
  • client_secret
  • resource_group (optional)
  • Credentials are encrypted with AES-256-GCM using a KMS-wrapped data encryption key (DEK) and stored in vendor_connections.credentials_encrypted.
  • Meridian never returns the plaintext key after save. Revocation is disconnect: deactivate or delete the vendor connection — sync stops and the encrypted blob is no longer used.
  • OAuth client-credentials fields are stored together in the encrypted credentials blob (no Azure portal password is stored beyond the client secret you provide).

Sync schedule & behavior

Azure Cost Management often lags 24–48 hours. Syncs automatically every 6 hours; manual sync anytime. There is no per-connection frequency setting.

Setup steps

  1. Register an app in Entra ID with Cost Management read access to the subscription.
  2. Enter subscription, tenant, client id/secret (and optional resource group) in Meridian Vendors → Azure OpenAI.
  3. Confirm spend rows after the Cost Management lag window.

Troubleshooting

  • Auth errors: verify client secret expiry and Cost Management Reader role.
  • Empty spend: wait 24–48h after usage; confirm the resource group filter if set.

Related

Onaro Meridian is FinOps for agentic AI: the system of record that attributes, controls and books what AI agents spend.