Skip to content

Commit 465e250

Browse files
authored
Update service-bus-managed-identity.md
Add message saying asa jobs only need sender / owner (does not use receiver). Update the numbered list on how to assign MSI to include sender as well as owner.
1 parent 0f5624d commit 465e250

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

articles/stream-analytics/service-bus-managed-identity.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,8 @@ For the Stream Analytics job to access your Service Bus using managed identity,
4343
- [Azure Service Bus Data Sender](../role-based-access-control/built-in-roles.md#azure-service-bus-data-sender): Use this role to give send access to Service Bus namespace and its entities.
4444
- [Azure Service Bus Data Receiver](../role-based-access-control/built-in-roles.md#azure-service-bus-data-receiver): Use this role to give receiving access to Service Bus namespace and its entities.
4545

46+
Please note that Stream Analytics Jobs do not need nor do they use [Azure Service Bus Data Receiver](../role-based-access-control/built-in-roles.md#azure-service-bus-data-receiver).
47+
4648
> [!TIP]
4749
> When you assign roles, assign only the needed access. For more information about the importance of least privilege access, see the [Lower exposure of privileged accounts](../security/fundamentals/identity-management-best-practices.md#lower-exposure-of-privileged-accounts) article.
4850
@@ -54,7 +56,7 @@ For the Stream Analytics job to access your Service Bus using managed identity,
5456

5557
| Setting | Value |
5658
| --- | --- |
57-
| Role | Azure Service Bus Data Owner |
59+
| Role | Azure Service Bus Data Owner or Azure Service Bus Data Sender |
5860
| Assign access to | User, group, or service principal |
5961
| Members | \<Name of your Stream Analytics job> |
6062

0 commit comments

Comments
 (0)