Request New Entra Applications
Collect business purpose, responsible owners, metadata, credential requirements, and initial API access before AZExecute provisions the application registration and service principal.
Application Governance + ACME Certificates + Hybrid Automation
Give users
Self-service.
Keep administrators in control.
Govern the Entra application lifecycle, run end-to-end ACME certificate automation, and turn repeatable IT operations into approved self-service. AZExecute collects the right information, routes every decision, executes across cloud and on-premises systems, and records the complete result.
- Data remains in Denmark or Sweden across multiple locations
- Entra ID + Azure RBAC native
- Cloud, Azure Arc + on-premises
Every request approved, executed, and recorded
Built For Governed Operations
One governed platform for applications, certificates, and hybrid automation
Microsoft Entra IDMicrosoft GraphAzure RBACAzure Resource GraphAzure AutomationAzure Arc + Hybrid AgentsSignalR Live DataEvent-Driven AutomationACME Certificate LifecycleNordic Data Residency
Replace Common IT Requests
Turn repeatable tickets into safe self-service
Request Internal Or External API Access
Handle application roles, delegated permissions, Microsoft Graph access, justification, owner approval, tenant approval, and consent in one visible request flow.
Complete Identity And Directory Changes
Publish approved identity, user, group, and directory updates as guided operations instead of relying on free-form tickets, scripts, or broad administrative access.
Run Infrastructure And Azure Operations
Turn repeatable Azure, server, service, virtual machine, DNS, file, and connected-system actions into controlled self-service operations.
Automate Certificate Lifecycles
Issue and renew certificates through Let's Encrypt, GlobalSign Atlas, DigiCert CertCentral, or custom ACME v2 services, with automated DNS validation and post-renewal deployment.
Give Support Safe Operational Actions
Let support staff run approved diagnostics and remediation with validated inputs while administrators control access, approvals, and the underlying automation.
From Request To Recorded Result
One controlled flow from user input to completed work
Capability 1
Start With A Guided Request
Replace a technical ticket with a form designed for the operation. Required fields, validation, protected values, and live directory or infrastructure lookups collect complete information the first time.
Capability 2
Apply Access And Approval Rules
Publish the request only to the right users and groups. Route sensitive application, permission, identity, and infrastructure changes to the responsible owner or administrator before execution.
Capability 3
Provision Applications And Permissions
Create the app registration and service principal after approval, retain business metadata and ownership, and handle internal or external API access through the correct consent path.
Capability 4
Execute Across Every Environment
Run reusable workflows across Azure, Azure Arc, on-premises agents, scripts, runbooks, pipelines, directories, DNS, certificates, and connected platforms from the same request.
Capability 5
Show Progress As The Work Happens
Use SignalR-powered agents and live execution updates to show current status, console output, decisions, and results without waiting for a ticket to be manually updated.
Capability 6
Record Results And Automate Follow-Up
Keep the request, approval, execution history, output, and result together. Let events start remediation, create an incident, notify owners, or trigger the next workflow automatically.
Three Core Capabilities
Control the lifecycles that create the most operational work
Use each capability independently or connect them: provision an application, issue its certificate, and let the automation engine deploy and rotate it wherever it is needed.
Application governance
Govern Entra Applications From Request To Retirement
Give teams a guided way to request applications and permissions while administrators retain ownership of policy, approval, provisioning, credentials, consent, and lifecycle decisions.
- Provision app registrations and service principals after approval
- Manage owners, permissions, secrets, certificates, and lifecycle state
- Keep request, consent, execution, and administrative history together
Certificate automation
Run The Entire ACME Certificate Lifecycle
Replace certificate spreadsheets and manual renewal runbooks with governed accounts, reusable templates, automated DNS-01 validation, scheduled renewal, and deployment workflows.
Let's Encrypt
GlobalSign Atlas
DigiCert CertCentral
Custom ACME v2
Let's Encrypt
GlobalSign Atlas
DigiCert CertCentral- Support Let's Encrypt, GlobalSign Atlas, DigiCert CertCentral, and approved custom ACME v2 services
- Automate ordering, DNS validation, propagation checks, renewal, cleanup, and notifications
- Trigger post-renewal workflows across applications, agents, appliances, and Azure services
Automation engine
Build Governed Workflows Across Cloud And On-Premises
Compose reusable automation from native steps, scripts, agents, runbooks, pipelines, events, and connected systems—then publish it as controlled self-service.
- Use validated inputs, protected values, access rules, and approvals
- Execute across Azure, PowerShell, Bash, Azure Arc, DNS, AD, DevOps, GitHub, and more
- Stream live progress and retain structured execution history and follow-up
Start With One High-Volume Request
Launch without replacing your identity or security model
Step 1
Connect Your Tenant And Infrastructure
Sign in with Entra ID, complete tenant setup, and connect the Azure, agent, directory, certificate, or integration endpoints needed for the first operation.
Step 2
Choose A Repetitive Request
Start with a high-volume application, permission, identity, certificate, DNS, or infrastructure request that currently requires manual administrator work.
Step 3
Define The Form, Approval, And Automation
Choose the required input, responsible approvers, permitted users, workflow steps, notifications, and follow-up while keeping existing identity and access boundaries.
Step 4
Publish, Measure, And Reuse
Release the operation as self-service, follow every run through live status and structured history, then reuse the same controls for the next request.
For Requesters, Support, And Administrators
Make routine work easier without handing out admin access
Requesters get clear forms and visible progress. Support staff can start approved operations without scripts or broad privileges. Administrators define the inputs, approvals, access, and automation once, then retain control of every execution.
- Less time collecting missing information and repeating portal work
- No need to distribute standing administrator access for routine operations
- One history for the request, decision, execution, result, and follow-up
Which Request Should You Stop Handling Manually?
Turn your next repeatable IT request into self-service
Start with application governance, ACME certificate automation, or one high-volume infrastructure operation. Keep your existing access model while AZExecute adds guided input, approval, automated execution, live status, and complete history.