Skip to content

Commit 61520c5

Browse files
authored
Update how-to-credential-manager-key-vault.md
1 parent c8930b7 commit 61520c5

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/operator-nexus/how-to-credential-manager-key-vault.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,9 +24,9 @@ Azure Operator Nexus utilizes secrets and certificates to manage component secur
2424
2525
## Configure Managed Identity for Cluster Manager
2626

27-
Beginning with the 2024-06-01 public preview API, managed identities are used in the Cluster Manager for write access to rotated credentials to a key vault. The Cluster Manager identity can be system-assigned or [user-assigned](/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities), and can be managed directly via APIs or via CLI.
27+
Beginning with the 2024-06-01-public-preview API, managed identities are used in the Cluster Manager for write access to rotated credentials to a key vault. The Cluster Manager identity can be system-assigned or [user-assigned](/entra/identity/managed-identities-azure-resources/how-manage-user-assigned-managed-identities), and can be managed directly via APIs or via CLI.
2828

29-
The examples below describe how to configure a managed identity for a Cluster Manager if one is not already configured.
29+
These examples describe how to configure a managed identity for a Cluster Manager.
3030

3131
- Create or update Cluster Manager with system-assigned identity
3232
```
@@ -93,7 +93,7 @@ User-assigned identity example:
9393
> [!IMPORTANT]
9494
> Use of App IDs for Customer Key Vault access is deprecated and support will be removed in a future version. It is recommended to use managed identity principals.
9595
96-
Instead of managed identities, the following application IDs may be granted access to the Key Vault.
96+
Instead of managed identities, the following application IDs grant access to the Key Vault.
9797

9898
- Ensure that the *Microsoft.NetworkCloud* resource provider is registered with the customer subscription.
9999

@@ -110,7 +110,7 @@ az provider register --namespace 'Microsoft.NetworkCloud' --subscription <Subscr
110110

111111
## Writing Credential Updates to a Customer Key Vault on Nexus Cluster
112112

113-
- Assign the *Operator Nexus Key Vault Writer Service Role*. Ensure that *Azure role-based access control* is selected as the permission model for the key vault on the *Access configuration* view. Then from the *Access control (IAM)* view, select to add a role assignment.
113+
- Assign the *Operator Nexus Key Vault Writer Service Role*. Ensure that *Azure role-based access control* is selected as the permission model for the key vault on the *Access configuration* view. Then from the *Access Control* view, select to add a role assignment.
114114

115115
| Role Name | Role Definition ID |
116116
|:-------------------------------------------------------|:-------------------------------------|

0 commit comments

Comments
 (0)