Skip to content

Commit 8854a58

Browse files
committed
App Insights auth fixes and other customer integrations
1 parent 860286e commit 8854a58

File tree

2 files changed

+78
-83
lines changed

2 files changed

+78
-83
lines changed

articles/azure-functions/functions-app-settings.md

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -58,19 +58,16 @@ Don't use both `APPINSIGHTS_INSTRUMENTATIONKEY` and `APPLICATIONINSIGHTS_CONNECT
5858

5959
## APPLICATIONINSIGHTS_AUTHENTICATION_STRING
6060

61-
The connection string for Application Insights by using Microsoft Entra authentication. Use this setting when you must connect to your Application Insights workspace by using Microsoft Entra authentication. For more information, see [Microsoft Entra authentication for Application Insights](../azure-monitor/app/azure-ad-authentication.md).
61+
Enables access to Application Insights by using Microsoft Entra authentication. Use this setting when you must connect to your Application Insights workspace by using Microsoft Entra authentication. For more information, see [Microsoft Entra authentication for Application Insights](../azure-monitor/app/azure-ad-authentication.md).
6262

63-
- For system-assigned identity:
63+
When you use `APPLICATIONINSIGHTS_AUTHENTICATION_STRING`, the specific value that you set depends on the type of managed identity:
6464

65-
| App setting | Value |
66-
| -------------- |--------- |
67-
| APPLICATIONINSIGHTS_AUTHENTICATION_STRING | `Authorization=AAD` |
65+
| Managed identity | Setting value |
66+
| ----- | ----- |
67+
| System-assigned | `Authorization=AAD` |
68+
| User-assigned | `Authorization=AAD;ClientId=<USER_ASSIGNED_CLIENT_ID>` |
6869

69-
- For user-assigned identity:
70-
71-
| App setting | Value |
72-
| ------------- | -------- |
73-
| APPLICATIONINSIGHTS_AUTHENTICATION_STRING | `Authorization=AAD;ClientId={Client id of the User-Assigned Identity}` |
70+
This authentication requirement is applied to connections from the Functions host, snapshot debugger, profiler, and any language-specific agents. To use this setting, the managed identity must already be available to the function app, with an assigned role equivalent to [Monitoring Metrics Publisher](/azure/role-based-access-control/built-in-roles/monitor#monitoring-metrics-publisher).
7471

7572
[!INCLUDE [functions-app-insights-disable-local-note](../../includes/functions-app-insights-disable-local-note.md)]
7673

0 commit comments

Comments
 (0)