Skip to content

Commit 99c2112

Browse files
authored
Merge pull request #206972 from enkrumah/patch-46
Update cosmos-db-managed-identity.md
2 parents 26c8693 + 7564013 commit 99c2112

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

articles/stream-analytics/cosmos-db-managed-identity.md

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: enkrumah
55
ms.author: ebnkruma
66
ms.service: stream-analytics
77
ms.topic: how-to
8-
ms.date: 05/04/2022
8+
ms.date: 08/04/2022
99
ms.custom: subject-rbac-steps
1010
---
1111

@@ -42,10 +42,6 @@ For the Stream Analytics job to access your Cosmos DB using managed identity, th
4242
|Built-in role |Description |
4343
|---------|---------|
4444
|[DocumentDB Account Contributor](../role-based-access-control/built-in-roles.md#documentdb-account-contributor)|Can manage Azure Cosmos DB accounts. Allows retrieval of read/write keys. |
45-
|[Cosmos DB Account Reader Role](../role-based-access-control/built-in-roles.md#cosmos-db-account-reader-role)|Can read Azure Cosmos DB account data. Allows retrieval of read keys. |
46-
47-
> [!TIP]
48-
> When you assign roles, assign only the needed access. If your service requires only reading data, then assign the **Cosmos DB Account Reader** role to the managed identity. For more information about the importance of least privilege access, see the [Lower exposure of privileged accounts](../security/fundamentals/identity-management-best-practices.md#lower-exposure-of-privileged-accounts) article.
4945

5046
1. Select **Access control (IAM)**.
5147

0 commit comments

Comments
 (0)