Azure Troubleshooting

Managing Inactive Accounts & Connection Failures

When a connected account goes inactive, Mavvrik automatically alerts your workspace admins and account owners so they can fix the connection or disable the account.

An inactive account typically means we can no longer authenticate with your cloud/SaaS provider. This can impact data freshness, dashboards, and reports, so it's important to review and take action quickly.

How Inactivity Alerts Work

When Mavvrik detects an issue with an account:

1. The account status is marked as Inactive

2. An alert is sent to:

   • Admins/Owners of Mavvrik portal

3. The alert includes an error message that explains why the account went inactive. Click on Inactive status and then i icon to know the details

Daily Alert Frequency

• Inactivity alerts are sent every day until the issue is resolved (either fixed or the account is disabled).

• This ensures timely action and improved visibility into connection issues.

Common Error Messages & Recommended Actions

1. Error: Client secret key is expired

What it means
The client secret used to authenticate with your provider (for example, your Microsoft Entra ID app) has expired. Mavvrik can't refresh data using the existing credentials.

Action to take

1. Go to your identity provider (e.g., Microsoft Entra ID, or your relevant provider).

2. Open the application (app registration) associated with Mavvrik.

3. Create a new client secret:

   • Generate a new secret.

   • Copy the value and store it securely.

4. In Mavvrik:

   • Navigate to the Accounts / Connections page.

   • Edit the affected account.

   • Update the Client Secret field with the new value.

   • Save your changes.

5. Confirm that the account status changes back to Active and data starts syncing again.

2. Error: Microsoft Entra ID app is deleted

What it means
The Microsoft Entra ID application previously registered for Mavvrik has been deleted. Mavvrik no longer has a valid app registration to use for authentication.

Action to take

1. In Microsoft Entra ID:

   • Create a new App Registration for Mavvrik.

   • Configure any required permissions (same as originally set up for Mavvrik).

2. Generate a new client secret for the new app.

3. In Mavvrik:

   • Go to the Accounts / Connections page.

   • Edit the affected account (or create a new one if needed).

   • Update:

     • Application (Client) ID

     • Directory (Tenant) ID

     • Client Secret

   • Save your changes.

4. Verify the account status returns to Active and that data refresh resumes.

Error: SubscriptionCostDisabled (Customer does not have the privilege to see the cost)

What it means

Azure Cost Management access is disabled for the customer tenant (common in CSP / Microsoft Customer Agreement setups).
Because the cost visibility policy isn't enabled by the partner/provider, Azure blocks cost queries—so Mavvrik can't pull cost data from Cost Management APIs for that subscription.

Action to take

Enable Cost Management / cost visibility policy (Partner / Provider tenant)

You must sign in to the partner tenant (not the customer tenant) and you typically need Admin Agent permissions.

1. In the Azure portal, sign in to the partner tenant.

2. Go to Cost Management + Billing.

3. In Billing scope, select the correct billing account/scope.

4. Select Customers.

   • If you don't see Customers, you're likely signed into the customer tenant by mistake.

5. Choose the customer that's getting the error.

6. Under Settings, select Policies.

7. Find the policy for Azure usage charges / cost visibility.

8. Set the policy to Yes (enabled).

9. Save the change.

Account-Level Control & Disabling Unused Accounts

If you don't want to restore a connection or don't want alerts for a specific account, you can disable it.

Account-Level Control
If you do not want inactivity alerts for a specific account:

1. Navigate to the Accounts / Admin page in Mavvrik.

2. Find the relevant account.

3. Click Edit.

4. Change the account Status to Disabled.

5. Save your changes.

Once an account is disabled:

• Mavvrik stops monitoring it for connectivity issues.

• You will no longer receive inactivity alerts for that account.

• Historical data already ingested remains available (subject to your retention settings).

This gives you full control over which accounts are actively monitored and alerted on.

The following are the steps you should take if you're seeing a warning message on the public clouds page.

1. Click on Edit of the billing/subscription account which shows warning.

2. Copy the command

3. Login to your Azure account where billing/subscription is configured.

4. Open the Cloud Shell

5. Run the command and wait till it's completed.

6. Click Done from Mavvrik UI & Run the Data ingestion

If you come across any error message on Mavvrik UI while onboarding Billing account or subscription, please adhere to the following table for resolution.

Steps to Take When a Client Secret Has Expired

1. Log in to the Azure Portal.

2. Navigate to Microsoft Entra ID > App registrations.

3. Select the application used for onboarding.

4. Go to Certificates & secrets.

5. Click + New client secret, add a description and expiration period, then click Add.

6. Copy the new client secret value immediately (it will not be visible again).

7. Log in to Mavvrik and go to Admin.

8. Edit the account that is showing as Inactive.

9. Paste the new secret into the Application (Client) Secret field and click Update.

Below are the actions you should take when you encounter the following error message.

If you come across this error message; it signifies that an account with this Account ID has already been onboarded.

When encountering this error message, you have entered the invalid Account ID.

If you encounter this error message, it means that you've partially entered an incorrect Account ID.

When you come across this error message, it indicates that you've entered the invalid Subscription ID.

If you encounter this error message, it means that you've partially entered an incorrect Subscription ID.

When you come across this error message, it indicates that you've entered the invalid Tenant ID.

If you encounter this error message, it means that you've partially entered an incorrect Tenant ID.

If you encounter this error message, it means that you've partially entered an incorrect or invalid Client ID.

If you encounter this error message, it means that you've partially entered an incorrect or invalid Secret.

• If a WARNING message appears on the Mavvrik public page interface, please adhere to the following table for resolution

Common Troubleshooting

• If you come across an issue related to access levels within your Azure portal, here are some potential solutions.

  1. To create exports and assign roles to Microsoft Entra ID app we need Owner (recommended) or both Contributor and User Access Administrator role for logged in user (Ref: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#user-access-administrator )

  2. To manage a Microsoft Entra ID app and create a client secret we need Application Administrator role.
     (Ref: https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#application-administrator) )

  3. If the IT team cannot assign the above role, then involve an IT admin user. This user should at least have the Application Administrator or Administrator role and they will create the Microsoft Entra ID app on your behalf and get Application (client) ID, Directory (tenant) ID & Client Secret Value from them. (Ref: https://help.mavvrik.ai/content/step-3-assign-required-roles-permissions-to-the-ap)