You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> Use of App IDs for Customer Key Vault access is deprecated and support will be removed in a future version. It is recommended to use managed identity principals.
95
-
96
-
Instead of managed identities, the following application IDs grant access to the Key Vault.
97
-
98
-
- Ensure that the *Microsoft.NetworkCloud* resource provider is registered with the customer subscription.
99
-
100
-
```console
101
-
az provider register --namespace 'Microsoft.NetworkCloud' --subscription <Subscription ID>
102
-
```
103
-
104
-
- When assigned role access to the key vault, use the following App IDs as principal IDs.
| Production | AFOI-NC-RP-PME-PROD | 05cf5e27-931d-47ad-826d-cb9028d8bd7a |
109
-
| Production | AFOI-NC-MGMT-PME-PROD | 3365d4ea-bb16-4bc9-86dd-f2c8cf6f1f56 |
110
-
111
91
## Writing Credential Updates to a Customer Key Vault on Nexus Cluster
112
92
113
93
- Assign the *Operator Nexus Key Vault Writer Service Role*. Ensure that *Azure role-based access control* is selected as the permission model for the key vault on the *Access configuration* view. Then from the *Access Control* view, select to add a role assignment.
az networkcloud cluster show --ids /subscriptions/<subscription ID>/resourceGroups/<Resource Group Name>/providers/Microsoft.NetworkCloud/clusters/<Nexus Cluster Name> --query secretArchive
135
115
```
136
116
117
+
For more help:
118
+
119
+
```console
120
+
az networkcloud cluster update --secret-archive ?? --help
121
+
```
122
+
137
123
## Add a permission to User-assigned identity
138
124
139
125
When using a User-assigned identity, add the following role assignment to the UAI resource:
@@ -144,10 +130,3 @@ When using a User-assigned identity, add the following role assignment to the UA
144
130
4. Assign access to: **User, group, or service principal**.
0 commit comments