Skip to content

Commit 2ce1088

Browse files
authored
Merge pull request #103654 from dlepow/acrfix
[ACR] Tasks MSI principal
2 parents 2962afd + e9479f7 commit 2ce1088

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

articles/container-registry/container-registry-tasks-authentication-managed-identity.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -87,12 +87,12 @@ Depending on the requirements of your task, grant the identity permissions to ac
8787

8888
Use the [Azure CLI](../role-based-access-control/role-assignments-cli.md) or other Azure tools to manage role-based access to resources. For example, run the [az role assignment create][az-role-assignment-create] command to assign the identity a role to the resource.
8989

90-
The following example assigns a managed identity the permissions to pull from a container registry. The command specifies the *service principal ID* of the identity and the *resource ID* of the target registry.
90+
The following example assigns a managed identity the permissions to pull from a container registry. The command specifies the *principal ID* of the task identity and the *resource ID* of the target registry.
9191

9292

9393
```azurecli
9494
az role assignment create \
95-
--assignee <servicePrincipalID> \
95+
--assignee <principalID> \
9696
--scope <registryID> \
9797
--role acrpull
9898
```

includes/container-registry-tasks-system-id-properties.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.date: 07/12/2019
1010
ms.author: danlep
1111
ms.custom: include file
1212
---
13-
In the command output, the `identity` section shows an identity of type `SystemAssigned` is set in the task. The `principalId` is the service principal ID of the identity:
13+
In the command output, the `identity` section shows an identity of type `SystemAssigned` is set in the task. The `principalId` is the principal ID of the task identity:
1414

1515
```console
1616
[...]

includes/container-registry-tasks-user-assigned-id.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,13 @@ Create an identity named *myACRTasksId* in your subscription using the [az ident
1818
az identity create --resource-group myResourceGroup --name myACRTasksId
1919
```
2020

21-
To configure the user-assigned identity in the following steps, use the [az identity show][az-identity-show] command to store the identity's resource ID, service principal ID, and client ID in variables.
21+
To configure the user-assigned identity in the following steps, use the [az identity show][az-identity-show] command to store the identity's resource ID, principal ID, and client ID in variables.
2222

2323
```azurecli
2424
# Get resource ID of the user-assigned identity
2525
resourceID=$(az identity show --resource-group myResourceGroup --name myACRTasksId --query id --output tsv)
2626
27-
# Get service principal ID of the user-assigned identity
27+
# Get principal ID of the task's user-assigned identity
2828
principalID=$(az identity show --resource-group myResourceGroup --name myACRTasksId --query principalId --output tsv)
2929
3030
# Get client ID of the user-assigned identity

0 commit comments

Comments
 (0)