Skip to content

Commit 2db881b

Browse files
author
Arvind Krishnaa Jagannathan
committed
nit: Clarification
1 parent 134dcbd commit 2db881b

File tree

1 file changed

+9
-7
lines changed

1 file changed

+9
-7
lines changed

articles/search/search-howto-managed-identities-cosmos-db.md

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.author: arjagann
77

88
ms.service: azure-ai-search
99
ms.topic: how-to
10-
ms.date: 12/23/2024
10+
ms.date: 01/06/2025
1111
ms.custom:
1212
- subject-rbac-steps
1313
- ignite-2023
@@ -17,21 +17,19 @@ ms.custom:
1717

1818
This article explains how to set up an indexer connection to an Azure Cosmos DB database using a managed identity instead of providing credentials in the connection string.'
1919

20-
You can use a system-assigned managed identity or a user-assigned managed identity. Managed identities are Microsoft Entra logins and require Azure role assignments to access data in Azure Cosmos DB.
20+
You can use a system-assigned managed identity or a user-assigned managed identity. Managed identities are Microsoft Entra logins and require Azure role assignments to access data in Azure Cosmos DB. You can optionally [enforce role-based access as the only authentication method](/azure/cosmos-db/how-to-setup-rbac#disable-local-auth) for data connections by setting `disableLocalAuth` to `true` for your Azure Cosmos DB for NoSQL account.
2121

2222
## Prerequisites
2323

2424
* [Create a managed identity](search-howto-managed-identities-data-sources.md) for your search service.
2525

26-
* You can optionally [enforce role-based access as the only authentication method](/azure/cosmos-db/how-to-setup-rbac#disable-local-auth) for data connections by setting `disableLocalAuth` to `true` for your Azure Cosmos DB for NoSQL account.
27-
2826
## Supported approaches for managed identity authentication
2927

30-
Azure AI Search supports two mechanisms to connect using managed identity.
28+
Azure AI Search supports two mechanisms to connect to Azure Cosmos DB using managed identity.
3129

32-
1. The _legacy_ approach requires configuring the managed identity to have reader permissions on the management plane of the target Azure Cosmos DB account. Azure AI Search utilizes that identity to fetch the account keys of Cosmos DB account in the background to access the data. This approach won't work if the Cosmos DB account has `"disableLocalAuth": true`.
30+
* The _legacy_ approach requires configuring the managed identity to have reader permissions on the management plane of the target Azure Cosmos DB account. Azure AI Search utilizes that identity to fetch the account keys of Cosmos DB account in the background to access the data. This approach won't work if the Cosmos DB account has `"disableLocalAuth": true`.
3331

34-
1. The _modern_ approach requires configuring the managed identity appropriate roles on the management and data plane of the target Azure Cosmos DB account. Azure AI Search will then request an access token to access the data in the Cosmos DB account. This approach works even if the Cosmos DB account has `"disableLocalAuth": true`.
32+
* The _modern_ approach requires configuring the managed identity appropriate roles on the management and data plane of the target Azure Cosmos DB account. Azure AI Search will then request an access token to access the data in the Cosmos DB account. This approach works even if the Cosmos DB account has `"disableLocalAuth": true`.
3533

3634
Indexers that connect to Azure Cosmos DB for NoSQL support both the _legacy_ and the _modern_ approach - the _modern_ approach is highly recommended.
3735

@@ -41,6 +39,8 @@ Indexers that connect to Azure Cosmos DB for NoSQL support both the _legacy_ and
4139

4240
## Connect to Azure Cosmos DB for NoSQL
4341

42+
This section outlines the steps to configure connecting to Azure Cosmos DB for NoSQL via the _modern_ approach.
43+
4444
### Configure control plane role assignments
4545

4646
1. Sign in to Azure portal and find your Cosmos DB for NoSQL account.
@@ -142,6 +142,8 @@ POST https://[service name].search.windows.net/datasources?api-version=2024-11-0
142142

143143
## Connect to Azure Cosmos DB for Gremlin/MongoDB (preview)
144144

145+
This section outlines the steps to configure connecting to Azure Cosmos DB for Gremlin/Mongo via the _legacy_ approach.
146+
145147
### Configure control plane role assignments
146148

147149
Follow the same steps as before to assign the appropriate roles on the control plane of the Azure Cosmos DB for Gremlin/MongoDB.

0 commit comments

Comments
 (0)