Skip to content

Commit 9a26b05

Browse files
ktoliverktoliver
authored
Merge pull request #42584 from daveba/add-msi-ua-limit-includes
[Azure AD MSI] Add msi ua limit includes
2 parents 6194c18 + 7523a00 commit 9a26b05

8 files changed

+49
-55
lines changed

‎articles/active-directory/managed-service-identity/how-to-manage-ua-identity-arm.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,8 +49,7 @@ As with the Azure portal and scripting, Azure Resource Manager templates provide
4949

5050
To create a user assigned identity, use the following template. Replace the `<USER ASSIGNED IDENTITY NAME>` value with your own values:
5151

52-
> [!IMPORTANT]
53-
> Creating user assigned identities only supports alphanumeric and hyphen (0-9 or a-z or A-Z or -) characters. Additionally, name should be limited to 24 character length for the assignment to VM/VMSS to work properly. Check back for updates. For more information, see [FAQs and known issues](known-issues.md)
52+
[!INCLUDE[ua-character-limit](~/includes/managed-identity-ua-character-limits.md)]
5453

5554
```json
5655
{

‎articles/active-directory/managed-service-identity/how-to-manage-ua-identity-powershell.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,7 @@ In this article, you learn how to create, list and delete a user assigned identi
3636

3737
To create a user assigned identity, use the [New-AzureRmUserAssignedIdentity](/powershell/module/azurerm.managedserviceidentity/new-azurermuserassignedidentity) command. The `ResourceGroupName` parameter specifies the resource group where to create the user assigned identity, and the `-Name` parameter specifies its name. Replace the `<RESOURCE GROUP>` and `<USER ASSIGNED IDENTITY NAME>` parameter values with your own values:
3838

39-
> [!IMPORTANT]
40-
> Creating user assigned identities only supports alphanumeric and hyphen (0-9 or a-z or A-Z or -) characters. Additionally, name should be limited to 24 character length for the assignment to VM/VMSS to work properly. Check back for updates. For more information, see [FAQs and known issues](known-issues.md)
39+
[!INCLUDE[ua-character-limit](~/includes/managed-identity-ua-character-limits.md)]
4140

4241
```azurepowershell-interactive
4342
New-AzureRmUserAssignedIdentity -ResourceGroupName <RESOURCEGROUP> -Name <USER ASSIGNED IDENTITY NAME>

‎articles/active-directory/managed-service-identity/msi-tutorial-linux-vm-access-arm.md

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -69,29 +69,29 @@ For this tutorial, you first create a new Linux VM. You can also opt to use an e
6969
7070
2. Create a user-assigned identity using [az identity create](/cli/azure/identity#az_identity_create). The `-g` parameter specifies the resource group where the MSI is created, and the `-n` parameter specifies its name. Be sure to replace the `<RESOURCE GROUP>` and `<MSI NAME>` parameter values with your own values:
7171
72-
> [!IMPORTANT]
73-
> Creating user assigned identities only supports alphanumeric and hyphen (0-9 or a-z or A-Z or -) characters. Additionally, name should be limited to 24 character length for the assignment to VM/VMSS to work properly. Check back for updates. For more information see [FAQs and known issues](known-issues.md)
72+
[!INCLUDE[ua-character-limit](~/includes/managed-identity-ua-character-limits.md)]
7473
75-
```azurecli-interactive
76-
az identity create -g <RESOURCE GROUP> -n <MSI NAME>
77-
```
7874
79-
The response contains details for the user assigned identity created, similar to the following example. Note the `id` value for your user assigned identity, as it will be used in the next step:
75+
```azurecli-interactive
76+
az identity create -g <RESOURCE GROUP> -n <MSI NAME>
77+
```
8078

81-
```json
82-
{
83-
"clientId": "73444643-8088-4d70-9532-c3a0fdc190fz",
84-
"clientSecretUrl": "https://control-westcentralus.identity.azure.net/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>/credentials?tid=5678&oid=9012&aid=12344643-8088-4d70-9532-c3a0fdc190fz",
85-
"id": "/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>",
86-
"location": "westcentralus",
87-
"name": "<MSI NAME>",
88-
"principalId": "9012",
89-
"resourceGroup": "<RESOURCE GROUP>",
90-
"tags": {},
91-
"tenantId": "733a8f0e-ec41-4e69-8ad8-971fc4b533bl",
92-
"type": "Microsoft.ManagedIdentity/userAssignedIdentities"
93-
}
94-
```
79+
The response contains details for the user assigned identity created, similar to the following example. Note the `id` value for your user assigned identity, as it will be used in the next step:
80+
81+
```json
82+
{
83+
"clientId": "73444643-8088-4d70-9532-c3a0fdc190fz",
84+
"clientSecretUrl": "https://control-westcentralus.identity.azure.net/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>/credentials?tid=5678&oid=9012&aid=12344643-8088-4d70-9532-c3a0fdc190fz",
85+
"id": "/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>",
86+
"location": "westcentralus",
87+
"name": "<MSI NAME>",
88+
"principalId": "9012",
89+
"resourceGroup": "<RESOURCE GROUP>",
90+
"tags": {},
91+
"tenantId": "733a8f0e-ec41-4e69-8ad8-971fc4b533bl",
92+
"type": "Microsoft.ManagedIdentity/userAssignedIdentities"
93+
}
94+
```
9595

9696
## Assign a user assigned identity to your Linux VM
9797

‎articles/active-directory/managed-service-identity/qs-configure-cli-windows-vm.md

Lines changed: 21 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -113,35 +113,34 @@ This section walks you through creation of a VM with assignment of a user assign
113113

114114
2. Create a user assigned identity using [az identity create](/cli/azure/identity#az_identity_create). The `-g` parameter specifies the resource group where the user assigned identity is created, and the `-n` parameter specifies its name.
115115

116-
> [!IMPORTANT]
117-
> Creating user assigned identities only supports alphanumeric and hyphen (0-9 or a-z or A-Z or -) characters. Additionally, name should be limited to 24 character length for the assignment to VM/VMSS to work properly. Check back for updates. For more information see [FAQs and known issues](known-issues.md)
116+
[!INCLUDE[ua-character-limit](~/includes/managed-identity-ua-character-limits.md)]
118117

119118

120-
```azurecli-interactive
121-
az identity create -g myResourceGroup -n myUserAssignedIdentity
122-
```
119+
```azurecli-interactive
120+
az identity create -g myResourceGroup -n myUserAssignedIdentity
121+
```
123122
The response contains details for the user assigned identity created, similar to the following. The resource id value assigned to the user assigned identity is used in the following step.
124123

125-
```json
126-
{
127-
"clientId": "73444643-8088-4d70-9532-c3a0fdc190fz",
128-
"clientSecretUrl": "https://control-westcentralus.identity.azure.net/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>/credentials?tid=5678&oid=9012&aid=73444643-8088-4d70-9532-c3a0fdc190fz",
129-
"id": "/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>",
130-
"location": "westcentralus",
131-
"name": "<MSI NAME>",
132-
"principalId": "e5fdfdc1-ed84-4d48-8551-fe9fb9dedfll",
133-
"resourceGroup": "<RESOURCE GROUP>",
134-
"tags": {},
135-
"tenantId": "733a8f0e-ec41-4e69-8ad8-971fc4b533bl",
136-
"type": "Microsoft.ManagedIdentity/userAssignedIdentities"
137-
}
138-
```
124+
```json
125+
{
126+
"clientId": "73444643-8088-4d70-9532-c3a0fdc190fz",
127+
"clientSecretUrl": "https://control-westcentralus.identity.azure.net/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>/credentials?tid=5678&oid=9012&aid=73444643-8088-4d70-9532-c3a0fdc190fz",
128+
"id": "/subscriptions/<SUBSCRIPTON ID>/resourcegroups/<RESOURCE GROUP>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<MSI NAME>",
129+
"location": "westcentralus",
130+
"name": "<MSI NAME>",
131+
"principalId": "e5fdfdc1-ed84-4d48-8551-fe9fb9dedfll",
132+
"resourceGroup": "<RESOURCE GROUP>",
133+
"tags": {},
134+
"tenantId": "733a8f0e-ec41-4e69-8ad8-971fc4b533bl",
135+
"type": "Microsoft.ManagedIdentity/userAssignedIdentities"
136+
}
137+
```
139138

140139
3. Create a VM using [az vm create](/cli/azure/vm/#az_vm_create). The following example creates a VM associated with the new user assigned identity, as specified by the `--assign-identity` parameter. Be sure to replace the `<RESOURCE GROUP>`, `<VM NAME>`, `<USER NAME>`, `<PASSWORD>`, and `<MSI ID>` parameter values with your own values. For `<MSI ID>`, use the user assigned identity's resource `id` property created in the previous step:
141140

142-
```azurecli-interactive
143-
az vm create --resource-group <RESOURCE GROUP> --name <VM NAME> --image UbuntuLTS --admin-username <USER NAME> --admin-password <PASSWORD> --assign-identity <MSI ID>
144-
```
141+
```azurecli-interactive
142+
az vm create --resource-group <RESOURCE GROUP> --name <VM NAME> --image UbuntuLTS --admin-username <USER NAME> --admin-password <PASSWORD> --assign-identity <MSI ID>
143+
```
145144

146145
### Assign a user assigned identity to an existing Azure VM
147146

‎articles/active-directory/managed-service-identity/qs-configure-cli-windows-vmss.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -116,8 +116,7 @@ This section walks you through creation of an VMSS and assignment of a user assi
116116

117117
2. Create a user assigned identity using [az identity create](/cli/azure/identity#az-identity-create). The `-g` parameter specifies the resource group where the user assigned identity is created, and the `-n` parameter specifies its name. Be sure to replace the `<RESOURCE GROUP>` and `<USER ASSIGNED IDENTITY NAME>` parameter values with your own values:
118118

119-
> [!IMPORTANT]
120-
> Creating user assigned identities only supports alphanumeric and hyphen (0-9 or a-z or A-Z or -) characters. Additionally, name should be limited to 24 character length for the assignment to VM/VMSS to work properly. Check back for updates. For more information see [FAQs and known issues](known-issues.md)
119+
[!INCLUDE[ua-character-limit](~/includes/managed-identity-ua-character-limits.md)]
121120

122121

123122
```azurecli-interactive

‎articles/active-directory/managed-service-identity/qs-configure-powershell-windows-vmss.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ ms.author: daveba
2323

2424
Managed Service Identity provides Azure services with an automatically managed identity in Azure Active Directory. You can use this identity to authenticate to any service that supports Azure AD authentication, without having credentials in your code.
2525

26-
In this article, you learn how to perform the following Managed Service Identity operations on an Azure Virtual Machine Scale Set (VMSS), using PowerShell:
26+
In this article, you learn how to perform the Managed Service Identity operations on a Virtual Machine Scale Set (VMSS), using PowerShell:
2727
- Enable and disable the system assigned identity on an Azure VMSS
2828
- Add and remove a user assigned identity on an Azure VMSS
2929

@@ -104,7 +104,7 @@ In this section, you learn how to add and remove a user assigned identity from a
104104
105105
### Assign a user assigned identity during creation of an Azure VMSS
106106
107-
Creating a new VMSS with a user assigned identity is not currently supported via PowerShell. See the next section on how to add a user assigned identity to an existing VMSS. Check back for updates.
107+
Creating a new VMSS with a user assigned identity isn't currently supported via PowerShell. See the next section on how to add a user assigned identity to an existing VMSS. Check back for updates.
108108
109109
### Assign a user identity to an existing Azure VMSS
110110
@@ -118,8 +118,7 @@ To assign a user assigned identity to an existing Azure VMSS:
118118

119119
2. First retrieve the VM properties using the `Get-AzureRmVM` cmdlet. Then to assign a user assigned identity to the Azure VMSS, use the `-IdentityType` and `-IdentityID` switch on the [Update-AzureRmVM](/powershell/module/azurerm.compute/update-azurermvm) cmdlet. Replace `<VM NAME>`, `<SUBSCRIPTION ID>`, `<RESROURCE GROUP>`, `<USER ASSIGNED ID1>`, `USER ASSIGNED ID2` with your own values.
120120

121-
> [!IMPORTANT]
122-
> Creating user assigned identities only supports alphanumeric and hyphen (0-9 or a-z or A-Z or -) characters. Additionally, name should be limited to 24 character length for the assignment to VM/VMSS to work properly. Check back for updates. For more information, see [FAQs and known issues](known-issues.md)
121+
[!INCLUDE[ua-character-limit](~/includes/managed-identity-ua-character-limits.md)]
123122

124123

125124
```powershell

‎articles/active-directory/managed-service-identity/tutorial-windows-vm-ua-arm.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -75,8 +75,7 @@ New-AzureRmVm `
7575

7676
A user assigned identity is created as a standalone Azure resource. Using the [New-AzureRmUserAssignedIdentity](/powershell/module/azurerm.managedserviceidentity/get-azurermuserassignedidentity), Azure creates an identity in your Azure AD tenant that can be assigned to one or more Azure service instances.
7777

78-
> [!IMPORTANT]
79-
> Creating user assigned identities only supports alphanumeric and hyphen (0-9 or a-z or A-Z or -) characters. Additionally, name should be limited to 24 character length for the assignment to VM/VMSS to work properly. Check back for updates. For more information see [FAQs and known issues](known-issues.md)
78+
[!INCLUDE[ua-character-limit](~/includes/managed-identity-ua-character-limits.md)]
8079

8180
```azurepowershell-interactive
8281
Get-AzureRmUserAssignedIdentity -ResourceGroupName myResourceGroupVM -Name ID1

‎includes/managed-identity-ua-character-limits.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,4 +11,4 @@
1111
---
1212

1313
> [!IMPORTANT]
14-
> When creating user assigned identities, only alphanumeric characters (0-9, a-z, A-Z) and the hyphen (-) are supported. Additionally, the name should be limited to 24 characters in length for the assignment to VM/VMSS to work properly. Check back for updates. For more information, see [FAQs and known issues](/azure/active-directory/managed-service-identity/known-issues)
14+
> When creating user assigned identities, only alphanumeric characters (0-9, a-z, A-Z) and the hyphen (-) are supported. Additionally, the name should be limited to 24 characters in length for the assignment to VM/VMSS to work properly. Check back for updates. For more information, see [FAQs and known issues](/azure/active-directory/managed-service-identity/known-issues).

0 commit comments

Comments
 (0)