Skip to content

Commit 6c63d0e

Browse files
authored
Merge pull request #197242 from kim-ale/patch-1
Update service-bus-managed-identity.md
2 parents be9575d + 465e250 commit 6c63d0e

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

articles/stream-analytics/service-bus-managed-identity.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,8 @@ For the Stream Analytics job to access your Service Bus using managed identity,
4343
- [Azure Service Bus Data Sender](../role-based-access-control/built-in-roles.md#azure-service-bus-data-sender): Use this role to give send access to Service Bus namespace and its entities.
4444
- [Azure Service Bus Data Receiver](../role-based-access-control/built-in-roles.md#azure-service-bus-data-receiver): Use this role to give receiving access to Service Bus namespace and its entities.
4545

46+
Please note that Stream Analytics Jobs do not need nor do they use [Azure Service Bus Data Receiver](../role-based-access-control/built-in-roles.md#azure-service-bus-data-receiver).
47+
4648
> [!TIP]
4749
> When you assign roles, assign only the needed access. For more information about the importance of least privilege access, see the [Lower exposure of privileged accounts](../security/fundamentals/identity-management-best-practices.md#lower-exposure-of-privileged-accounts) article.
4850
@@ -54,7 +56,7 @@ For the Stream Analytics job to access your Service Bus using managed identity,
5456

5557
| Setting | Value |
5658
| --- | --- |
57-
| Role | Azure Service Bus Data Owner |
59+
| Role | Azure Service Bus Data Owner or Azure Service Bus Data Sender |
5860
| Assign access to | User, group, or service principal |
5961
| Members | \<Name of your Stream Analytics job> |
6062

0 commit comments

Comments
 (0)