Connect PD Azure DNS to your public DNS subscription using a Microsoft Entra app registration. The app credential is separate from the account you connect inside PD Modules to activate your licence.

Prepare the four values

Install PD Modules, connect the account holding your licence, then install PD Azure DNS from its Store and allow the staff role that needs it. Prepare an active Azure subscription and a dedicated app registration for DNS management.

From the app’s Overview, collect the Directory (tenant) ID and Application (client) ID. Under Certificates & secrets, create a client secret and copy its Value, not its secret ID. Keep the value privately; it is shown when created. Get the Subscription ID from the intended subscription, rather than using its display name.

Assign appropriate DNS Zone Contributor access to the intended DNS resources. Microsoft documents its built-in role permissions. The DNS role is not a general resource-group creation permission: have the Azure administrator prepare the intended group if necessary.

Add the provider

1. Open PD Modules → Azure DNS → Providers → Add a provider.
2. Enter a recognisable connection name.
3. Enter the tenant ID, client ID, client secret and subscription ID.
4. Review the intended DNS resource group and optional secret-expiry date.
5. Run Test connection, inspect the result, then save the provider.
6. Check a zone and its records in the configured resource group.

The test signs in and lists DNS zones at subscription scope. A pass confirms that request; it does not inspect a named role assignment or prove every write is authorised. Normal zone browsing uses the provider’s configured resource group, so not every subscription zone will appear.

Resolve a refusal precisely

For a sign-in failure, compare the tenant/client pair and the secret value/expiry. For an authorisation failure, retain the exact refused action and scope so the Azure administrator can review the relevant role. Do not replace narrow access with an unrestricted role just to clear a warning. See the resource-group guide and secret-rotation guide for those specific tasks.

See the PD Azure DNS WHMCS guide for related tasks, or explore the module.