Skip to content

Commit 32d7181

Browse files
author
RoseHJM
committed
Updated managed identity article
1 parent 73e64a2 commit 32d7181

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

articles/devtest-labs/use-managed-identities-environments.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,18 @@ ms.custom: UpdateFrequency2
1010

1111
# Use Azure managed identities to deploy environments in a lab
1212

13-
As a lab owner, you can use a managed identity to deploy environments in a lab. This feature helps in scenarios where the environment contains or has references to Azure resources that are outside the environments resource group. These resources include key vaults, shared image galleries, and networks. Managed identities enable creation of sandbox environments that aren't limited to the resource group of that environment.
13+
As a lab owner, you can use a managed identity to deploy environments in a lab. This feature helps in scenarios where the environment contains or has references to Azure resources that are outside the environment's resource group. These resources include key vaults, shared image galleries, and networks. Managed identities enable creation of sandbox environments that aren't limited to the resource group of that environment.
1414

15-
By default, when you create an environment, the lab creates a system-assigned identity while deploying the Azure Resource Manager template (ARM template). The system-assigned identity accesses Azure resources and services on a lab users behalf. DevTest Labs creates a system-assigned identity by default the first time it creates the lab environment. Learn more about [why a lab creates a system-assigned identity](configure-lab-identity.md#scenarios-for-using-labs-system-assigned-identity).
15+
By default, when you create an environment, the lab creates a system-assigned identity while deploying the Azure Resource Manager template (ARM template). The system-assigned identity accesses Azure resources and services on a lab user's behalf. DevTest Labs creates a system-assigned identity by default the first time it creates the lab environment. Learn more about [why a lab creates a system-assigned identity](configure-lab-identity.md#scenarios-for-using-labs-system-assigned-identity).
1616

17-
As a lab owner, you can choose to grant the labs system-assigned identity permissions to access Azure resources outside the lab. You can also use your user-assigned identity for the scenario. The labs system-assigned identity is valid only for the life of the lab. The system-assigned identify is deleted when you delete the lab. When you have environments in multiple labs that need to use an identity, consider using a user-assigned identity.
17+
As a lab owner, you can choose to grant the lab's system-assigned identity permissions to access Azure resources outside the lab. You can also use your user-assigned identity for the scenario. The lab's system-assigned identity is valid only for the life of the lab. The system-assigned identify is deleted when you delete the lab. When you have environments in multiple labs that need to use an identity, consider using a user-assigned identity.
1818

19-
> [!NOTE]
19+
> [!IMPORTANT]
2020
> Currently, a single user-assigned identity is supported per lab.
2121
22+
23+
[!INCLUDE [direct-azure-deployment-environments](includes/direct-azure-deployment-environments.md)]
24+
2225
## Prerequisites
2326

2427
- [Create, list, delete, or assign a role to a user-assigned managed identity using the Azure portal](../active-directory/managed-identities-azure-resources/how-to-manage-ua-identity-portal.md).

0 commit comments

Comments
 (0)