Prerequisites

What you need before deploying Ajutant.

Azure Requirements

Ajutant deploys into your existing Azure tenant. You will need:

Subscription

An active Azure subscription with sufficient quota for the following services. If you’re on a pay-as-you-go or Enterprise Agreement subscription, no changes are typically required.

Required Services

ServicePurposeMinimum SKU
Azure Container AppsApplication hostingConsumption plan
Azure Database for PostgreSQLConversation and vector storageFlexible Server, Burstable B1ms
Azure AI FoundryModel endpoints (GPT-4o, etc.)Standard
Azure Key VaultSecrets managementStandard
Azure Virtual NetworkNetwork isolationStandard

Azure AD / Entra ID

Ajutant uses your existing identity provider for authentication. You will need:

  • An Azure AD tenant (Entra ID)
  • Permission to register an application (App Registration)
  • At least one security group for initial team assignment
No new licences required
Ajutant does not require any additional Azure AD licence tier. It works with Azure AD Free, P1, and P2.

Permissions

The person performing the deployment will need:

  • Contributor role on the target Azure subscription (or a dedicated resource group)
  • Application Administrator or Global Administrator to create the Entra ID App Registration
  • Access to Azure AI Foundry to provision model endpoints

Model Access

Before deployment, ensure you have access to at least one model in Azure AI Foundry. We recommend starting with:

  • GPT-4o — general-purpose assistant work
  • GPT-4o mini — cost-effective for simpler tasks

Additional models (DeepSeek, Llama, o3-mini) can be added post-deployment through the admin panel.

Regional availability
Some models are only available in specific Azure regions. Check Azure AI Foundry model availability before choosing your deployment region.

Network Considerations

Ajutant deploys within a Virtual Network with private endpoints. Outbound internet access is not required for core functionality. If your organisation uses network security groups or Azure Firewall, ensure the following internal traffic is permitted:

  • Container Apps ↔ PostgreSQL (port 5432)
  • Container Apps ↔ Key Vault (port 443)
  • Container Apps ↔ AI Foundry endpoints (port 443)

Next Steps

Once you have confirmed the prerequisites, proceed to the Quick Start guide.