Skip to main content

Spotto Portal Setup: Create Account and Connect

Overview​

This guide takes you from a new Spotto account to a connected Azure or AWS environment.

How Spotto works​

Spotto reads your Azure, analyses it in your data region, and puts the results where your team works.

Your Azure: subscriptions (resources, metrics, activity log, Advisor and Defender), billing (Cost Management data and billing exports) and, optionally, Entra ID (app secret expiry, admin roles and MFA posture). Spotto connects read-only by default, through a service principal (Click & Connect, PowerShell, Terraform or manual), GDAP for partners through Partner Center, or guest access for a one-off assessment. Reader on your subscriptions is the only required role. Spotto runs in your region (Asia Pacific, United States or Europe, each separate): it collects your Azure resources, metrics and billing, analyses cost, usage, security and governance, and recommends savings, risks and fixes with the evidence. You use the results in the Portal, Spotto Chat, alerts and notifications (Slack, Teams, email or webhook), service delivery reports in Word, tickets (Jira, Halo, ConnectWise, Autotask), the API and MCP, and the browser extension inside the Azure portal. Optional write-back is off until you turn it on and uses its own Azure roles: Advisor dismissals, VM and Bastion schedules, policy exemptions and remediation actions.Your Azure: subscriptions (resources, metrics, activity log, Advisor and Defender), billing (Cost Management data and billing exports) and, optionally, Entra ID (app secret expiry, admin roles and MFA posture). Spotto connects read-only by default, through a service principal (Click & Connect, PowerShell, Terraform or manual), GDAP for partners through Partner Center, or guest access for a one-off assessment. Reader on your subscriptions is the only required role. Spotto runs in your region (Asia Pacific, United States or Europe, each separate): it collects your Azure resources, metrics and billing, analyses cost, usage, security and governance, and recommends savings, risks and fixes with the evidence. You use the results in the Portal, Spotto Chat, alerts and notifications (Slack, Teams, email or webhook), service delivery reports in Word, tickets (Jira, Halo, ConnectWise, Autotask), the API and MCP, and the browser extension inside the Azure portal. Optional write-back is off until you turn it on and uses its own Azure roles: Advisor dismissals, VM and Bastion schedules, policy exemptions and remediation actions.
  • Connect Azure explains how to choose a setup path, and Permissions Spotto Needs shows what each extra read role unlocks.
  • Connect AWS (preview) explains the read-only IAM role, how to deploy it across accounts or an organization, and how to add billing exports.
  • Azure Write Permissions covers the optional write-back roles.
  • Once connected, press Ctrl+K for Global Search to jump to pages, companies, subscriptions, and supported current-page resources or recommendations.
  • Spotto Chat answers page-level and environment-wide questions and can pull in current Microsoft guidance.

Prerequisites​

Before you begin, make sure you have:

  • The Azure subscriptions you want Spotto to analyse.
  • Someone who can grant Reader on those subscriptions, and admin consent if you add Entra ID read.
  • For AWS (preview), someone who can create IAM roles in the AWS accounts you want to connect. See Connect AWS to Spotto.

Getting Started​

Start by creating an account and choosing your data region, then connect a cloud.

Troubleshooting​

I can’t access the Spotto Portal​

What you're seeing: You can’t sign in or the Portal won’t load. Likely causes: Wrong region, missing MFA step, or an account in a different environment. How to fix:

  1. Confirm you’re using the correct Portal URL for your region/account.
  2. Complete MFA setup if prompted.
  3. If access still fails, contact us with your email address and selected region.