-
Runs az login --use-device-code. A URL + code appear in the live output - open the URL in any browser, enter the code, and pick your Work or School account. Signs out of any existing session first, so re-running refreshes your token.
Runs az login — a browser sign-in window opens (use this when your tenant blocks device-code sign-in). Signs out of any existing session first. If the window never appears, switch back to Device code.
Captures subscription, tenant, your object ID, and egress IP, prefills the forms, then runs the readiness checks (permissions, resource providers, App Service quota) — see the Readiness tab.
Writes install secrets into the bootstrap Key Vault. Values are sent once and never stored on disk.
This will set up the main resource group. If Provision dev slot is checked, it will add that as well.
Tick the steps to run - uncheck any you'll do manually. Only checked steps run; the rest are marked skipped. The "Open temp SQL firewall" step enables Public Network Access (Selected networks) and adds your egress IP; "Remove temp SQL firewall" reverts it to Disabled. The dev-slot steps (grant, restart, Admin Center checklist) auto-skip with a log line if no dev slot was provisioned.