Skip to content

Commit 3c03902

Browse files
committed
Minor tweaks.
1 parent 4e017d5 commit 3c03902

File tree

1 file changed

+10
-5
lines changed

1 file changed

+10
-5
lines changed

articles/azure-cache-for-redis/cache-managed-identity.md

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -42,9 +42,9 @@ Managed identity can be enabled either when you create a cache instance or after
4242

4343
### Prerequisites and limitations
4444

45-
Managed identity for storage is only used with the import/export feature and persistence feature at present, which limits its use to the Premium tier of Azure Cache for Redis.
45+
Managed identity for storage is only used with the import/export feature and persistence feature now, which limits its use to the Premium tier of Azure Cache for Redis.
4646

47-
Managed identity for storage is not supported on caches that have a dependency on Cloud Services (classic). For more information on how to check on whether your cache is using Cloud Services (classi), see [How do I know if a cache is affected?](cache-faq.yml#how-do-i-know-if-a-cache-is-affected).
47+
Managed identity for storage isn't supported on caches that have a dependency on Cloud Services (classic). For more information on how to check on whether your cache is using Cloud Services (classic), see [How do I know if a cache is affected?](cache-faq.yml#how-do-i-know-if-a-cache-is-affected).
4848

4949
## Create a new cache with managed identity using the portal
5050

@@ -131,7 +131,7 @@ Set-AzRedisCache -ResourceGroupName \"MyGroup\" -Name \"MyCache\" -IdentityType
131131

132132
:::image type="content" source="media/cache-managed-identity/role-assignment.png" alt-text="Screenshot showing Add role assignment form with list of roles.":::
133133

134-
4. Select the **Members** tab. Under **Assign access to** select **Managed Identity**, and select on **Select members**. A sidebar pops up on the right.
134+
4. Select the **Members** tab. Under **Assign access to** select **Managed Identity**, and select on **Select members**. A sidebar pops up next to the working pane.
135135

136136
:::image type="content" source="media/cache-managed-identity/select-members.png" alt-text="Screenshot showing add role assignment form with members pane.":::
137137

@@ -144,15 +144,20 @@ Set-AzRedisCache -ResourceGroupName \"MyGroup\" -Name \"MyCache\" -IdentityType
144144
:::image type="content" source="media/cache-managed-identity/blob-data.png" alt-text="Screenshot of Storage Blob Data Contributor list.":::
145145

146146
> [!NOTE]
147-
> Adding an Azure Cache for Redis instance as a storage blob data contributor through system-assigned identity and checking [“Allow Azure services on the trusted services list to access this storage account”](../storage/common/storage-network-security.md?tabs=azure-portal#grant-access-to-trusted-azure-services) is needed for export to work with storage account with firewall exceptions. If you're not using managed identity and instead authorizing a storage account with a key, then having firewall exceptions on the storage account will break the persistence process and the import-export processes.
147+
> For _export_ to work with a storage account with firewall exceptions, you must:
148+
>- add an Azure Cache for Redis instance as a storage blob data contributor through system-assigned identity, and
149+
>- check [**Allow Azure services on the trusted services list to access this storage account**](../storage/common/storage-network-security.md?tabs=azure-portal#grant-access-to-trusted-azure-services).
150+
151+
152+
If you're not using managed identity and instead authorizing a storage account with a key, then having firewall exceptions on the storage account breaks the persistence process and the import-export processes.
148153

149154
## Use managed identity to access a storage account
150155

151156
### Use managed identity with data persistence
152157

153158
1. Open the Azure Cache for Redis instance that has been assigned the Storage Blob Data Contributor role and go to the **Data persistence** on the Resource menu.
154159

155-
2. Change the **Authentication Method** to **Managed Identity** and select the storage account you configured above. select **Save**.
160+
2. Change the **Authentication Method** to **Managed Identity** and select the storage account you configured earlier in the article. select **Save**.
156161

157162
:::image type="content" source="media/cache-managed-identity/data-persistence.png" alt-text="Screenshot showing data persistence pane with authentication method selected.":::
158163

0 commit comments

Comments
 (0)