This guide walks you through setting up Pashdi Business+ where your AI runs inside your own Azure subscription for full data sovereignty. Takes about 15 minutes.
You run one PowerShell script. It handles everything automatically:
After setup, your AI conversations go directly from Pashdi to your Azure OpenAI to Microsoft Graph. Nothing passes through Pashdi's servers.
Pashdi is the software layer only. All AI processing happens inside your own Microsoft Azure subscription under your own data processing agreement.
Your Azure Tenant ID identifies your organization to Pashdi. You will pass it to the setup script so the correct tenant is registered — especially important if your Microsoft account has access to multiple Azure tenants.
Sign in to the Azure Portal, open Microsoft Entra ID (formerly Azure Active Directory), and copy the Tenant ID shown on the Overview page.
Open Entra ID OverviewIf you already have Azure CLI installed (Step 2 covers installation), you can grab the ID from PowerShell:
Copy the GUID that prints — that is your Tenant ID.
If your account belongs to more than one Azure tenant (common for consultancies and MSPs), make sure you pick the tenant where you want Pashdi to operate. The setup script confirms this with you before registering — but it is easier to have the correct ID ready beforehand.
Before running the script, make sure you have these three things ready.
The script uses the Azure CLI to create resources in your Azure subscription. Download and install it first.
Download Azure CLI for WindowsAfter installing, close and reopen PowerShell so it picks up the new command.
You need an active Azure subscription (not just an Azure AD account). If your organization does not have one yet, you can create a free account with $200 credit.
Create free Azure account →Your company may already use Azure AD (for Microsoft 365 login) but that does not mean you have an Azure subscription. You need a subscription to create resources like Azure OpenAI.
You need to be an Owner or Contributor on your Azure subscription to create resources. If you are not sure, ask your Azure administrator.
The script registers the Microsoft.CognitiveServices provider automatically. Owner role covers all required permissions.
Windows blocks downloaded scripts by default. Run these two commands in PowerShell before running the setup script:
Windows marks files downloaded from the internet as potentially unsafe. Unblock-File tells Windows you trust this specific file. RemoteSigned means local scripts run freely but downloaded ones must be unblocked first.
Download the script, then run it from PowerShell in your Downloads folder.
Download Pashdi-BYOAI-Setup.ps1Open PowerShell, navigate to your Downloads folder, and run:
The script will sign you in to Azure, select your subscription, and run 6 steps automatically. Expected output when everything works:
This is a Microsoft limitation, not a Pashdi issue. New subscriptions need to request quota before they can deploy AI models. Usually takes 1-3 business days.
If the script shows a quota warning during Step 5, follow these steps:
Go to the Azure OpenAI quota page and request an increase for GPT-4o mini in your region (e.g. East US). Ask for at least 10,000 tokens per minute.
Open Azure Quota Request Page →If East US has no available quota, try another region by adding the -Location flag:
Once Microsoft approves your quota, re-run the same script. It skips steps already completed and only deploys the model.
Every step checks if it was already completed. Re-running will not create duplicates or overwrite anything.
Sign in with your Microsoft account. Your organization's bot is ready to use.
Open bot.pashdi.com →Type one of these to confirm your Azure OpenAI is working:
Visit your admin dashboard to control which IT actions are available to which users.
Open Dashboard →| Error | Cause | Fix |
|---|---|---|
| az not recognized | Azure CLI not installed or PowerShell not restarted after install | Install Azure CLI then close and reopen PowerShell |
| not digitally signed | Windows blocked the downloaded script file | Run: Unblock-File -Path .\Pashdi-BYOAI-Setup.ps1 |
| No subscriptions found | Azure account has no active subscription | Create a free subscription at azure.microsoft.com/free |
| MissingSubscriptionRegistration | CognitiveServices provider not registered on the subscription | Run: az provider register --namespace Microsoft.CognitiveServices --wait |
| Quota is 0 / deployment failed | New Azure subscriptions have 0 GPT-4o mini quota by default | Request quota at aka.ms/oai/quotaincrease. Takes 1-3 business days. |
| Model grayed out in Azure portal | Region does not support GPT-4o mini or quota not yet approved | Try another region: .\Pashdi-BYOAI-Setup.ps1 -Location "westeurope" |
| Bot still using old AI after setup | Plan not yet switched to Business+ | Email hello@pashdi.com with your Tenant ID and we will upgrade you manually |
We recommend GPT-4o mini for best performance and cost. Other models may work but are not officially tested with Pashdi.
GPT-4o mini is not available in all Azure regions. Try East US, West Europe, or North Europe if your region does not work.
New Azure subscriptions start with 0 quota. Microsoft approval takes 1-3 business days. Plan accordingly.
Your Azure OpenAI token costs are billed by Microsoft to your subscription. Pashdi does not charge for tokens on Business+.
The script sends your API key to Pashdi over HTTPS to store it securely. The key is never logged or shared.
You can re-run the script at any time to update credentials or retry after quota approval. It skips steps already done.
If you are stuck, email us at hello@pashdi.com and include your Azure Tenant ID (shown during the script run). We will help you get set up.