Skip to content

Azure investigations

Azure projects are a different workflow from code. They run read-only az investigations against your subscription and save the findings to the project's docs. No repo, no git worktree, no changes to your cloud.

Setup

  1. Install the az CLI and sign in with az login.
  2. Create an Azure project in the Projects view — it needs no repository path.

The Azure panel

The Azure panel is the guarded, read-only az surface:

  • Auth status — confirms you're signed in.
  • Quick presets — common queries (list resources, check network security groups, review permissions, and so on).
  • Free-form command box — run a custom az command.
  • Results — structured output plus the raw JSON.
  • Summary — an AI-generated digest of what the results mean.
  • Save to docs — persist the findings into the project docs.

Read-only by design

The panel is hard-guarded to read-only az commands. It can't create, update or delete anything in Azure — investigations are safe to run against production. Write operations are simply not available.

From findings to action

Saved findings become project docs that agents can reference. A typical flow:

  1. Investigate infrastructure with presets or custom queries.
  2. Save to docs the relevant findings.
  3. Toggle Include for AI so future agents use them as context.

Import from Azure DevOps

Separately, you can connect Azure DevOps in Settings to import work items as tasks — see Projects. This is distinct from the read-only az investigation flow above.