[QUERY] How to authenticate as a specific user assigned managed identity with a client secret. about azure-sdk-for-net

[jsquire]

Thank you for your feedback. Tagging and routing to the team member best able to assist.

[christothes]

Hi @nschuessler - Your choice of credential is dependent on which identity you want to authenticate with. If, for example, you wanted to authenticate with some registered app, you could use ClientSecretCredential. In that case the app ID (ClientID) is what defines that registered app as the service principal. You'd need to grant RBAC access to the resource for that client ID. See this for more information.

ManagedIdentityCredential is only available when running on the deployed host environment.

[github-actions]

Hi @nschuessler. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

[nschuessler]

Basically, my scenario is I cannot attach debugger to a running production server because of network configuration. But by having resources available and pressing F5 in visual studio I would still like to manually inspect that code is working.

[christothes]

You'll need to change the code to use a different credential type when running locally and the identity represented by that credential would need to have RBAC permissions to the resource. If your requirement is that it must be two different identities for accessing configuration and data, then you'll need two different identities for dev scenarios as well.

[github-actions]

Hi @nschuessler. Thank you for opening this issue and giving us the opportunity to assist. We believe that this has been addressed. If you feel that further discussion is needed, please add a comment with the text "/unresolve" to remove the "issue-addressed" label and continue the conversation.