Questions tagged [azure-managed-identity]

Azure AD managed identities for Azure resources.

For more information, see the documentation.

795 questions
4
votes
1 answer

Use Azure Python Function and Managed Identity to Download from Storage Account

I've created an Azure Function called "transformerfunction" written in Python which should upload and download data to an Azure Data Lake / Storage. I've also turned on System assigned managed identity and gave the function the role permissions…
4
votes
2 answers

Can't reference principalId of user assigned identity for key vault in same arm template

I'm having trouble referencing a user assigned identity that I create alongside a KeyVault instance within the same template. I've searched through documentation on how to reference managed identities in general and I believe it looks like the…
4
votes
1 answer

Access O365 Exchange Online with an Azure Managed Identity or Service Principal

I have a program in Powershell which runs in an Azure Function app which also has a managed identity called "AuditO365". It uses the managed identity to connect to Azure Key Vault to retrieve user credentials. It uses these credentials to connect to…
MAK
  • 125
  • 2
  • 13
4
votes
1 answer

New-AzureADServiceAppRoleAssignment in Azure CLI?

Is there a pendant in the Azure CLI world for the following command? New-AzureADServiceAppRoleAssignment -ObjectId $clientManagedIdentityObjectId -Id $serverAppRoleId -ResourceId $serverEnterpriseAppObjectId -PrincipalId…
timmkrause
  • 3,367
  • 4
  • 32
  • 59
4
votes
1 answer

Azure Service Connections

I'm trying to create a release pipeline in Azure DevOps. I created an App service resource in Azure and I want to deploy my web-app to this App service through my pipeline. For that I need to create an ARM service connection. Can you please help me…
4
votes
0 answers

Principal 'xyz' could not be resolved: how can I add a managed identity to Azure SQL Server when running under a Service Principal?

I want to add a managed identity (coming from an App Service) to Azure SQL Server. I created an AAD group where a group of my team and the Service Principal is part of. AzureSqlAdminGroup = TeamGroup + Service Principal This AAD group is added as…
4
votes
1 answer

Azure Managed Service Identity endpoint missing in App Service for Containers

I'm trying to deploy my app to Azure App Service for Containers, using the docker-compose preview. The deployment configuration is as follows: version: "3.7" services: auth: image: myorg/myimage environment: -…
4
votes
2 answers

Azure API Management + Azure Function and managed identity

I'm trying to call an Azure function from an API Management instance by using Managed Identity. I have set a System Managed Identity to my APIM instance. I have granted the Contributor role to this identity on the Azure Function App. I have also…
4
votes
2 answers

Azure MSI forced token refresh

I have long running jobs that use Azure MSI tokens to access ADLS Gen 2 storage. I am running into Azure server side token caching issue. This is my setup: I request access token for a user managed identity from Azure, the default TTL is 8…
Sandeep More
  • 655
  • 1
  • 6
  • 22
4
votes
4 answers

Azure MSI with AdlsClient: Access token expired

I am using Azure Managed Service Identity (MSI) to create a static (singleton) AdlsClient. I, then, use the AdlsClient in a Functions app to write to a Data Lake store. The app works fine for about a day but then it stops working and I see this…
MV23
  • 285
  • 5
  • 17
4
votes
2 answers

How to get an Azure MSI access token for a specific user assigned identity on a VM/VMSS?

I'd like to assign multiple user assigned managed service identities to a VM Scale Set in Azure. I can do so by following the the docs. What I have not figured out yet is how I can request a token for a specific identity.The docs for requesting a…
Christian Weiss
  • 1,060
  • 10
  • 12
4
votes
1 answer

MSI / Managed Service Identity) for Service Fabric Cluster

Looking at the new functionality called MSI (Managed Service Identity) Is it possible to use MSI inside VM scale sets or even better inside an Azure Service Fabric Cluster? I guess using the resource manager it might be possible, but just want to…
rfcdejong
  • 2,219
  • 1
  • 25
  • 51
3
votes
1 answer

How to recreate or refresh an access token for database connections in Azure functions?

I am trying to use an Entity Framework database context for use with managed identity credentials in an Azure function. I have been able to establish a database connection. The issue is that I am not able to keep the database connection established…
3
votes
0 answers

How do you configure Azure APIM's Managed Identity to include your Application Registration Access Roles from within the APIM Policies?

I am trying to use APIM to send a request through to a back-end App Service which requires the client to be authorised with roles. When I connect directly to the App Service with an App Registration with the roles this works as expected or when I…
3
votes
0 answers

User-Assigned Managed Identity for Function App to access its own (hosting) storage

I have created a User-Assigned Managed Identity that I have assigned to a Function App. I want to replace the Access Key connection string with the User-Assigned Managed Identity for the Function App to connects to its own stage, i.e., the hosting…
Ershad Nozari
  • 607
  • 3
  • 9
  • 23