How to Monitor Azure with SAM - do instructions exist?

Greetings. I am trying to setup Azure Cloud monitoring and there looks like there are a bunch of different pages with a bunch of different things to setup but nothing that actually takes you through step by step.  Does any of this exist?  I created an app in Azure but when I try to set it up in Orion to Add Cloud Account I get this error -

I have no idea what needs to have the Owner or Reader role.  The application I created?  Do I need to create a service account for this?  There are links to pages all over the place and I have been able to piece things together but I am stuck at Add Cloud Account. 

Thanks -Dave