Skip to content

Commit 0d8a4ac

Browse files
authored
Merge pull request #2 from jeffpatt24/patch-8
Update file-sync-managed-identities.md
2 parents d952abe + 15d604b commit 0d8a4ac

File tree

1 file changed

+5
-6
lines changed

1 file changed

+5
-6
lines changed

articles/storage/file-sync/file-sync-managed-identities.md

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -49,16 +49,13 @@ To configure your Azure File Sync deployment to utilize system-assigned managed
4949
- **Allow Azure services on the trusted services list to access this storage account** exception must be enabled for preview. [Learn more](file-sync-networking-endpoints.md#grant-access-to-trusted-azure-services-and-restrict-access-to-the-storage-account-public-endpoint-to-specific-virtual-networks)
5050

5151
- **Allow storage account key access** must be enabled for preview. To check this setting, navigate to your storage account and select **Configuration** under the Settings section.
52-
---
53-
- You must be a **member of the Owner management role** or have “Microsoft.Authorization/roleassignments/write” permissions.
54-
- **Allow Azure services on the trusted services list to access this storage account** exception must be enabled for preview. [Learn more](file-sync-networking-endpoints.md#grant-access-to-trusted-azure-services-and-restrict-access-to-the-storage-account-public-endpoint-to-specific-virtual-networks)
55-
- **Allow storage account key access** must be enabled for preview. To check this setting, navigate to your storage account and select **Configuration** under the Settings section.
56-
- **Az.StorageSync [PowerShell module](https://www.powershellgallery.com/packages/Az.StorageSync) version 2.2.0 or later** must be installed on the machine that will be used to configure Azure File Sync to use managed identities. To install the latest Az.StorageSync PowerShell module, run the following command from an elevated PowerShell window:
52+
53+
- **Az.StorageSync [PowerShell module](https://www.powershellgallery.com/packages/Az.StorageSync) version 2.2.0 or later** must be installed on the machine that will be used to configure Azure File Sync to use managed identities. To install the latest Az.StorageSync PowerShell module, run the following command from an elevated PowerShell window:
5754

5855
```powershell
5956
Install-Module Az.StorageSync -Force
6057
```
61-
58+
---
6259
## Regional availability
6360
6461
Azure File Sync support for system-assigned managed identities (preview) is available in [all Azure Public and Gov regions](https://azure.microsoft.com/global-infrastructure/locations/) that support Azure File Sync.
@@ -164,6 +161,7 @@ To check if the Storage Sync Service is using a system-assigned managed identity
164161
Get-AzStorageSyncService -ResourceGroupName <string> -StorageSyncServiceName <string>
165162
```
166163
Verify the value for the **UseIdentity** property is **True**. If the value is **False**, the Storage Sync Service is using shared keys to authenticate to the Azure file shares.
164+
167165
---
168166

169167
### How to check if a registered server is configured to use a system-assigned managed identity
@@ -186,6 +184,7 @@ Verify the **ApplicationId** property has a GUID which indicates the server is c
186184

187185
> [!NOTE]
188186
> Once the registered server(s) are configured to use a system-assigned managed identity, it can take up to one hour before the server uses the system-assigned managed identity to authenticate to the Storage Sync Service and Azure file shares.
187+
---
189188

190189
## More information
191190
Once the Storage Sync Service and registered server(s) are configured to use a system-assigned managed identity:

0 commit comments

Comments
 (0)