Merge pull request #206479 from xuehongg/mybranch3

Clarify that only only system-assigned managed identity will work

Author: PRMerger6

articles/connectors/connectors-create-api-azureblobstorage.md

@@ -5,7 +5,7 @@ services: logic-apps
 ms.suite: integration
 ms.reviewer: estfan, azla
 ms.topic: how-to
-ms.date: 05/28/2022
+ms.date: 07/30/2022
 tags: connectors
 ---
 
@@ -293,7 +293,7 @@ You can add network security to an Azure storage account by [restricting access
 
 - To access storage accounts behind firewalls using the Azure Blob Storage managed connector in Consumption, Standard, and ISE-based logic apps, review the following documentation:
 
-  - [Access storage accounts in same region with managed identities](#access-blob-storage-in-same-region-with-managed-identities)
+  - [Access storage accounts in same region with system-managed identities](#access-blob-storage-in-same-region-with-system-managed-identities)
 
   - [Access storage accounts in other regions](#access-storage-accounts-in-other-regions)
 
@@ -345,7 +345,7 @@ To add your outbound IP addresses to the storage account firewall, follow these
 
   You don't have to create a private endpoint. You can just permit traffic through the ISE outbound IPs on the storage account. 
 
-### Access Blob Storage in same region with managed identities
+### Access Blob Storage in same region with system-managed identities
 
 To connect to Azure Blob Storage in any region, you can use [managed identities for authentication](../active-directory/managed-identities-azure-resources/overview.md). You can create an exception that gives Microsoft trusted services, such as a managed identity, access to your storage account through a firewall.
 
@@ -360,10 +360,9 @@ To use managed identities in your logic app to access Blob Storage, follow these
 > [!NOTE]
 > Limitations for this solution:
 >
-> - You must set up a managed identity to authenticate your storage account connection.
+> - To authenticate your storage account connection, you have to set up a system-assigned managed identity. 
+> A user-assigned managed identity won't work.
 > 
-> - For Standard logic apps in the single-tenant Azure Logic Apps environment, only the system-assigned 
-> managed identity is available and supported, not the user-assigned managed identity.
 
 #### Configure storage account access
 

articles/logic-apps/create-managed-service-identity.md

@@ -5,7 +5,7 @@ services: logic-apps
 ms.suite: integration
 ms.reviewer: estfan, azla
 ms.topic: how-to
-ms.date: 07/14/2022
+ms.date: 07/30/2022
 ms.custom: devx-track-azurepowershell, subject-rbac-steps, ignite-fall-2021
 ---
 
@@ -706,8 +706,8 @@ The built-in HTTP trigger or action can use the system-assigned identity that yo
 As a specific example, suppose that you want to run the [Snapshot Blob operation](/rest/api/storageservices/snapshot-blob) on a blob in the Azure Storage account where you previously set up access for your identity. However, the [Azure Blob Storage connector](/connectors/azureblob/) doesn't currently offer this operation. Instead, you can run this operation by using the [HTTP action](logic-apps-workflow-actions-triggers.md#http-action) or another [Blob Service REST API operation](/rest/api/storageservices/operations-on-blobs).
 
 > [!IMPORTANT]
-> To access Azure storage accounts behind firewalls by using HTTP requests and managed identities, 
-> make sure that you also set up your storage account with the [exception that allows access by trusted Microsoft services](../connectors/connectors-create-api-azureblobstorage.md#access-blob-storage-in-same-region-with-managed-identities).
+> To access Azure storage accounts behind firewalls by using the Azure Blob connector and managed identities, 
+> make sure that you also set up your storage account with the [exception that allows access by trusted Microsoft services](../connectors/connectors-create-api-azureblobstorage.md#access-blob-storage-in-same-region-with-system-managed-identities).
 
 To run the [Snapshot Blob operation](/rest/api/storageservices/snapshot-blob), the HTTP action specifies these properties: