Share via

az appconfig identity

Managed identities for App Configuration stores.

Commands

Name Description Type Status
az appconfig identity assign

Update managed identities for an App Configuration store.

 Core GA
az appconfig identity remove

Remove managed identities for an App Configuration store.

 Core GA
az appconfig identity show

Display managed identities for an App Configuration store.

 Core GA

az appconfig identity assign

Edit

Update managed identities for an App Configuration store.

az appconfig identity assign --name
                             [--identities]
                             [--resource-group]

Examples

Enable the system-assigned identity for an existing App Configuration store

az appconfig identity assign -g MyResourceGroup -n MyAppConfiguration

Assign a user-assigned managed identity for an existing App Configuration store

az appconfig identity assign -g MyResourceGroup -n MyAppConfiguration --identities "/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCEGROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myUserAssignedIdentity"

Assign both system-assigned and user assigned identities for an existing App Configuration store

az appconfig identity assign -g MyResourceGroup -n MyAppConfiguration --identities [system] "/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCEGROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myUserAssignedIdentity"

Required Parameters

--name -n

Name of the App Configuration store. You can configure the default name using az configure --defaults app_configuration_store=<name>.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--identities

Accept system-assigned or user-assigned managed identities separated by spaces. Use '[system]' to refer to system-assigned managed identity or a resource ID to refer to user-assigned managed identity. If this argument is not provided or this argument is provided without any value, system-assigned managed identity will be used by default.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

Property Value
Default value: False
--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property Value
Default value: False
--output -o

Output format.

Property Value
Default value: json
Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property Value
Default value: False

az appconfig identity remove

Edit

Remove managed identities for an App Configuration store.

az appconfig identity remove --name
                             [--identities]
                             [--resource-group]

Examples

Remove the system-assigned identity from a App Configuration store.

az appconfig identity remove -g MyResourceGroup -n MyAppConfiguration

Remove a user assigned identity from a App Configuration store.

az appconfig identity remove -g MyResourceGroup -n MyAppConfiguration --identities "/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCEGROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/myUserAssignedIdentity"

Remove all identities from an App Configuration store.

az appconfig identity remove -g MyResourceGroup -n MyAppConfiguration --identities [all]

Required Parameters

--name -n

Name of the App Configuration store. You can configure the default name using az configure --defaults app_configuration_store=<name>.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--identities

Accept system-assigned or user-assigned managed identities separated by spaces. Use '[system]' to refer to system-assigned managed identity, '[all]' for all managed identities or a resource ID to refer user-assigned managed identity. If this argument is not provided or this argument is provided without any value, system-assigned managed identity will be removed by default.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

Property Value
Default value: False
--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property Value
Default value: False
--output -o

Output format.

Property Value
Default value: json
Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property Value
Default value: False

az appconfig identity show

Edit

Display managed identities for an App Configuration store.

az appconfig identity show --name
                           [--resource-group]

Examples

Display managed identities for a task.

az appconfig identity show -g MyResourceGroup -n MyAppConfiguration

Required Parameters

--name -n

Name of the App Configuration store. You can configure the default name using az configure --defaults app_configuration_store=<name>.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

Property Value
Default value: False
--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property Value
Default value: False
--output -o

Output format.

Property Value
Default value: json
Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property Value
Default value: False