Share via

New Compute Gallery requirements

PatrykKulik-6320 0 Reputation points
2025-08-01T10:47:30.0966667+00:00

From the 3rd September there is a new requirement on Compute Gallery resources. I was told to refer to tracking ID NLWK-FR8 for any questions about this.

My question is: if I am creating the image gallery via the azure CLI using the command:

az sig image-version create --resource-group "${RESOURCE_GROUP_NAME}" --subscription "${SUBSCRIPTION_ID}" \
    --target-regions ${TARGET_REGIONS} \
    --gallery-name "${SIMULATOR_COMPUTE_GALLERY_NAME}" \
    --gallery-image-definition "${SIMULATOR_COMPUTE_GALLERY_IMAGE_DEFINITION}" \
    --gallery-image-version "${SIMULATOR_IMAGE_VERSION}" \
    --os-vhd-storage-account "${STORAGE_ACCOUNT_ID}" \
    --os-vhd-uri "${BLOB_URL}"

is there anything I need to change in my script to be compliant with these changes?

I believe the Storage Account Contributor role on the managed identity performing this action should be sufficient as well, correct?

Azure Cloud Services
Azure Cloud Services
An Azure platform as a service offer that is used to deploy web and cloud applications.
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michele Ariis 2,535 Reputation points MVP
    2025-08-01T10:51:56.93+00:00

    Hi, you don’t need to change anything, your CLI command already uses the updated properties required for VHD imports, and “Storage Account Contributor” on the source Storage account is enough since it includes list-keys permission. Microsoft now requires storageAccountId for VHD sources (instead of the old ...source.id), and your use of --os-vhd-storage-account + --os-vhd-uri is already compliant. Just make sure your Azure CLI is up to date. For least privilege, you can use Storage Account Key Operator + Reader instead of full Contributor. Also verify the VHD is a fixed-size page blob, not a block blob. As long as you’re not switching to VM-as-source, no changes are needed. Let me know if you ever need a sample snippet for VM-based imports.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.