Questions tagged [azure-managed-identity]
Azure AD managed identities for Azure resources.
830
questions
0
votes
0
answers
30
views
Does python package Pyadomd have support for azure managed identity and how to implement authentication
Currently got a python script that uses Pyadomd to connect in to azure analysis services and
refresh a data model. I am getting the following error "Authentication failed: User ID and Password ...
0
votes
0
answers
54
views
Logic App with Managed Identity that gets triggered when a new Azure KeyVault Secret is to Expire
I have managed to create a Logic App that can send an email once an Azure KeyVault secret is about to expire. This works with my own credentials, but I cannot make it work with Managed Identity api ...
0
votes
1
answer
27
views
.NET 6 Blazor Server/Client app in Azure. DenyAnonymousAuthorizationRequirement only when deployed, works fine locally
I have a new .NET 6 Blazor app using the built in ApplicationUser and ApplicationDb authentication using
builder.Services.AddAuthentication()
.AddIdentityServerJwt();
When running locally it ...
0
votes
1
answer
40
views
how can I add user managed identity to the existing aks cluster agent pools (vmss)?
I have tried every possible way including change the cluster resource definition as shown below and rollout (incremental) but get "Cluster's 'identity.Type' should not be changed. Your cluster ...
1
vote
0
answers
48
views
Trouble Mounting Azure File Share in Kubernetes with UAMI: "Failed to Get Account Name from CSI" Error
I'm facing an issue with mounting an Azure File Share in a Kubernetes cluster using User-Assigned Managed Identity (UAMI). Although I already have the Azure File CSI driver installed and it is running ...
0
votes
1
answer
37
views
Azure Function access to SQL Server -IAAS through managed identity
I have an Azure function and a user assigned managed identity. I would like to connect a SQL Server hosted on Azure VM.
But the problem is CREATE USER/CREATE LOGIN [mymangedIdentity] FROM EXTERNAL ...
1
vote
1
answer
61
views
Use Managed Identity with Cosmos DB
I'd like to use managed identity when connecting to cosmos db table api from an azure function.
Uri tableEndpoint = new Uri("https://mycosmos.table.cosmos.azure.com:443/");
var ...
0
votes
0
answers
45
views
How to access IDENTITY_ENDPOINT within Logic App?
I'm currently working on an Azure Logic App where I need to access the IDENTITY_ENDPOINT to obtain tokens for various resources. I have assigned a user-assigned identity to my Logic App, but I am ...
0
votes
1
answer
70
views
Azure Managed Identity and Azure Private Endpoint
I am trying to design an app using Azure app services and Azure SQL database. I can connect to Azure MS SQL Server from Azure app service via Managed Identity or via Private link (Azure Private ...
0
votes
0
answers
101
views
Azure Devops ManagedIdentityCredential authentication unavailable. The requested identity has not been assigned to this resource
I'm trying to debug a failing unit test in Azure Devops pipeline. The unit test uses Managed Identity to create a token which is then used to connect to SQL database. Here's the relevant code:
string[]...
0
votes
1
answer
63
views
Managed identity access to storage using Flask application
I am using azure-identity and azure-storage-file-share package in Flask.
The app is trying to connect to Azure storage using User assigned managed identity, to read the File Share.
I have created the ...
0
votes
1
answer
196
views
How to use manage Identity to connect to azure storage from a pod in aks cluster
I have a managed Identity created. my application uses using flask.
Now my pods are deployed in the AKS cluster. my pod needs to connect to Azure storage using the pip package azure-storage-file-share....
0
votes
0
answers
47
views
How to paramatize service bus managed identity in 'connections.json' for standard logic apps?
I'm attempting to deploy a standard logic app with a service bus connector using a user assigned managed identity but I can't get it to work via terraform and ARM.
It looks connected in portal when I ...
0
votes
1
answer
25
views
Azure Durable Functions Identity-based queueTrigger binding '__queueServiceUri' does not exist
I've gone through the whole process of setting up an identity-based connection for my Python orchestrator activity.
documentation I referred to.
However, for some reason, the env variable ...
0
votes
1
answer
106
views
Can't connect to managed identity with User Administrator role
After applying the solution provided in this thread, which was basically adding User Administrator role to the managed identity I am using, I am getting the following error when connecting to the ...
0
votes
1
answer
47
views
Authorization for ApiController in Blazor Server
Starting points:
one azure tenant + azure AD/Entra;
one blazor server app deployed on App Service (+ App registration and managed identity)
with an ApiController behind Authorization to be accessed ...
-1
votes
1
answer
179
views
Attempting to create SQL Server resource using managed identity in a runbook gives forbidden result
I'm trying to create an Azure SQL Server in a PowerShell runbook. I am using a managed identity to which I have assigned contributor role to the subscription I'm trying to create it in.
This is the ...
0
votes
1
answer
95
views
How does Azure Instance Metadata Service (IMDS) gets the token from AAD for managed identity?
I am trying to understand a couple of things about Azure-managed identities.
If I need my app service to access a storage account then this is what I understood:
I can create a user assigned managed ...
0
votes
1
answer
117
views
Calling Azure Translator Service from web app with Managed Identity
I am new to Azure. I am calling azure translation service from web app. I want to use managed identity and so as far I tried below approach. Do you think this is the correct way. Or do I need to do ...
0
votes
1
answer
80
views
Does azure-spring-boot-starter-keyvault-certificates libray support Azure AD Workload Identity
I work on a project written in Kotlin and Spring, executed on Azure Kubernetes Service (AKS) and I am using the library com.azure.spring:azure-spring-boot-starter-keyvault-certificates:3.14.0 with the ...
0
votes
1
answer
89
views
Azure SystemAssigned managed identity not being set by bicep deploy
I'm trying to configure an Azure App Service to use a SystemAssigned managed identity to facilitate access to a SQL Server resource using Bicep.
However, after deploying to Azure, the status of System ...
1
vote
1
answer
82
views
Error when deploying ACI configured to pull images from ACR using managed identity over private VNET
I'm trying to follow the instructions here:
https://learn.microsoft.com/en-us/azure/container-instances/using-azure-container-registry-mi
Which I understand should allow me to deploy an Azure ...
0
votes
0
answers
33
views
Use basic auth on on-prem api, but managed identity token auth towards Entra application proxy
I have a on-prem api that uses username/password in header to authenticate.
This is published in Entra via a application proxy, with Entra pre-authentication enabled.
To give access, i have a system ...
0
votes
1
answer
177
views
Entity Framework code-first Azure SQL connection in .net Web API
I am getting below error while connecting to Azure SQL from App Service on Azure. Using ASP.NET WEB API not .net core.
Exception Details: System.Data.SqlClient.SqlException: Login failed for user ''.
[...
0
votes
1
answer
164
views
How to connect Azure Log Analytic Workspace using managed identity from .Net API
There is a workaround which is using azure active directory app permissions for connecting with azure log analytic workspace from c#. But whether the same can be achieved through managed identity ...
0
votes
0
answers
62
views
How to Check Status, Start and execute some commands inside azure virtual machine from azure functions
I am using a logic app which gets triggered when a new blob is uploaded in a storage container and the next step is to run a azure function with uploaded file as input. The purpose of azure function ...
0
votes
1
answer
110
views
Connect Azure SQL using Azure user managed identities
I have added UAMI as SQL AAD admin, I need to establish connection using same in pipeline to create or add users. Pipeline run on aks agent pool. Any suggestion how I can use UAMI in connection string?...
0
votes
0
answers
21
views
Mis-using managed identities for Azure resources
I have some VM's with managed identities to allow them to access azure key vaults, as per current best practice.
An operator can log into the VM though, and issue connect to Azure using something like
...
0
votes
0
answers
136
views
Accessing Api's using managed identity in Azure Web Api
I am trying to connect to web Api's. I wish to use managed identity to allow acces from source API to target API.
In source Api i run this code, in order to obtain an accesstoken:
token = await new ...
0
votes
0
answers
92
views
Performance issue when using Authentication type for ConnectionStrings as Active Directory Managed Identity
The current project is using azure functions published on azure.
When we compare the connection performance to Azure-SQL-Database between two ConnectionString Option Types:
Standard type
Server=tcp:...
0
votes
1
answer
276
views
Login timeout expired while connecting to SQL Server using workload identity
I am following this documentation from Microsoft.
import pyodbc
connString = f"Driver={{ODBC Driver 17 for SQL Server}};SERVER=tcp:<server-name>.database.windows.net,1433;DATABASE=<db-...
0
votes
1
answer
204
views
How to use Managed Identity to authenticate calls to Azure REST API using Azure SDK
I've got a .NET 6 web API that is deployed as a web app in Azure. This API has a service that calls the Azure REST API to get a list of resources in our Azure. I'm using the Azure SDK with the ...
0
votes
2
answers
111
views
Access cosmos db through azure synapse analytics notebook using system assigned managed identity linked service
i have made a linked service for cosmos db no sql using system assigned managed identity as auth type and linked service is published as well. Now when i access this linked service from synapse ...
0
votes
1
answer
90
views
"Set-AzureADMSServicePrincipal" cmdlet not recognize service priciple ID
I'm migrating Run As Account in my Azure Runbook to Managed Identity, everything seems smooth except for the Set-AzureADMSServicePrincipal cmdlet (in AzureADPreview module). That cmdlet doesn't ...
0
votes
0
answers
41
views
How to Connect Azure open AI account from function app using managed identity by providing RBAC roles to Azure function app [duplicate]
Scenario:
I have Azure open AI model in higher environment and we don't have access for the open AI key directly. So was trying to connect open AI model using function app by using managed identity, ...
0
votes
1
answer
263
views
using azure function identity to access a storage container
Step 1) Turn on azure identity for azure function (python 3.10)
Step 2) Copy over Object (principal) ID as new access policy in container settings
Step 3) try to run
def access_another_blob_container(...
0
votes
1
answer
242
views
ResourceIdentityRequired Error - Azure Policy assignments must include a 'managed identity'
I am trying to assign this policy But I am receiving error below:
New-AzPolicyAssignment -Name $policyNameToAssign -DisplayName $PolicyDisplayName -Scope $Subscription -PolicyDefinition $definition
#...
0
votes
1
answer
96
views
Github Actions - Publishing Azure Functions with Manged Identities - Server failed to authenticate the request
I am trying to publish an Azure Function (Linux, Consumption Plan) using Azure/functions-action@v1 Github Action with Managed Identity.
Infrastructure has successfuly been created with Bicep, but I'm ...
0
votes
1
answer
108
views
Azure Service Principal rotation (Graph API permission to managed identity)
My end goal is to be able to rotate SPN secrets and add
the new secret to Keyvault. I thought of using Azure
Automation account runbooks to do it. However, I think
the managed identity of the ...
1
vote
0
answers
106
views
Azure SQL password less authentication with multiple user role
I'm working on implementing Azure passwordless authentication for my Java app, which is hosted on AKS, and I'm using Azure SQL Single Database. I was able to achieve this by following the steps ...
0
votes
1
answer
162
views
Identity-based blob triggers for Azure functions fail locally
Context
A blob triggered function written in Java:
@FunctionName("blob")
public String execute(
@BlobTrigger(name = "test", path = "testcontainer/{name}", connection =...
0
votes
2
answers
227
views
Use a Linux VM system-assigned managed identity to access Azure Key Vault
I'm trying to reproduce the same result as described in the Microsoft Document https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-linux-vm-access-...
0
votes
0
answers
154
views
Connecting to Azure flexible postgres with user managed identity
I am trying to connect to Postgres database using Azure managed identity with a sample code as below
import io.vertx.pgclient.PgConnectOptions;
import io.vertx.pgclient.PgPool;
import io.vertx....
0
votes
0
answers
82
views
Update column encryption in background process
I am attempting to create a PowerShell script (or template, rather) that can be run from an Azure WebJob to dynamically update SQL Always Encrypted column configurations.
E.g., A new [Col1] NVARCHAR(1)...
1
vote
0
answers
209
views
Container apps connecting to SQL database using user-assigned managed identity: Failed to acquire token from MSI Endpoint (MSI Token failure)
I'm receiving the error below when deploy a container apps connecting to SQL database using user-assigned managed identity.
ERROR 1 --- [main] com.zaxxer.hikari.pool.HikariPool: HikariPool-1 - ...
0
votes
0
answers
237
views
Azure Managed Identity Python Running in Docker Container
I have created a python function app which reads client certificate from Azure key vault. It uses managed identity to read the certificate. Here is my code
credential = DefaultAzureCredential()
...
0
votes
0
answers
364
views
Azure DefaultAzureCredential not getting access token in Node.js application
I have a React front end, Node.js backend app with Azure SQL DB that has Azure AD auth on the React side, and managed identities in Azure. I am trying to get the access token using ...
0
votes
1
answer
124
views
Logic App to Azure DevOps REST API with Managed Identity
Is it possible to authenticate Logic App calls to DevOps REST API using Managed Identity?
The documentation shows only SDK possibilities, but no logic app examples provided.
I tried Azure DevOps ...
0
votes
0
answers
163
views
Is it possible to use a user-assigned managed identity with an App Registration in Azure?
Let's say I have two API services A and B and I want to provide role-based access control for calls to either of them. Currently I create an App Registration for both A and B and then define roles on ...
2
votes
1
answer
858
views
How to grant a Managed Identity permissions to an Azure SQL Database using IaC?
I use GitHub actions to spin up Azure resources from scratch using Infrastructure as Code (IaC). In my case Bicep, but it could be Terraform. This includes an Azure SQL Server, a SQL Database, and a ...