Merge pull request #126973 from v-jaswel/aca/v-jaswel_20250527_public_pr_126903

[ACA] Address public PR 126903 re remove all user-assigned identity assignments

Author: v-dirichards

articles/container-apps/managed-identity.md

@@ -8,7 +8,7 @@ ms.custom:
   - devx-track-azurecli
   - build-2025
 ms.topic: how-to
-ms.date: 10/25/2023
+ms.date: 06/03/2025
 ms.author: cshoe
 ---
 
@@ -489,9 +489,28 @@ To remove all user-assigned identities:
 
 ```azurecli
 az containerapp identity remove --name <APP_NAME> --resource-group <GROUP_NAME> \
-    --user-assigned <IDENTITY1_RESOURCE_ID> <IDENTITY2_RESOURCE_ID>
+    --user-assigned $(az containerapp show \
+    --name <APP_NAME> \
+    --resource-group <GROUP_NAME> \
+    --query "identity.userAssignedIdentities | keys(@)" \
+    --output tsv)
 ```
 
+Replace the `<PLACEHOLDERS>` with your values.
+
+The command to remove all user-assigned identities works as follows.
+
+| Command or argument | Description |
+|---|---|
+| `--user-assigned $(...)` | Run the command enclosed by the parentheses. Send the output to `--user-assigned`. |
+| `az containerapp show...` | Get information about the specified container app. |
+| `--query "identity.userAssignedIdentities...` | Get the user-assigned identities for the specified container app. |
+| `\|` | The pipe operator sends the user-assigned identities to the `keys` command. |
+| `keys(@)` | The user-assigned identities are returned as a set of key/value pairs. Each key is the ID of a user-assigned identity. This command extracts each key. |
+| `--output tsv` | Output the results in tab-separated format. |
+
+For more information see [How to query Azure CLI command output using a JMESPath query](/cli/azure/use-azure-cli-successfully-query).
+
 # [ARM template](#tab/arm)
 
 To remove all identities, set the `type` of the container app's identity to `None` in the ARM template: