> ## Documentation Index
> Fetch the complete documentation index at: https://www.towbar.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure

> Enable one runtime service principal for Azure Blob Storage backups and restores.

Create a Microsoft Entra service principal with Blob data access scoped to the required storage account and container. Configure the API process:

```dotenv theme={"system"}
TOWBAR_AZURE_ENABLED=true
TOWBAR_AZURE_STORAGE_ACCOUNT=example
TOWBAR_AZURE_CONTAINER=towbar-backups
TOWBAR_AZURE_PREFIX=towbar
TOWBAR_AZURE_TENANT_ID=<tenant-id>
TOWBAR_AZURE_CLIENT_ID=<client-id>
TOWBAR_AZURE_CLIENT_SECRET=<client-secret>
```

Restart the API. Towbar shows Azure Blob Storage only when every enabled value is valid and never stores or returns the service-principal secret. Confirm permissions with a real [resource backup and restore](/docs/backups). Rotate the secret in the environment, recreate the API container, verify an operation, and then revoke the previous secret.