Merge pull request #49811 from MicrosoftDocs/master

8/23 AM Publish

Author: huypub

articles/active-directory/managed-service-identity/media/msi-qs-configure-portal-windows-vm/add-user-assigned-identity-vm-screenshot1.png

@@ -23,10 +23,7 @@ ms.author: daveba
 
 Managed Service Identity provides Azure services with an automatically managed identity in Azure Active Directory. You can use this identity to authenticate to any service that supports Azure AD authentication, without having credentials in your code. 
 
-In this article, you will learn how to enable and disable the system assigned identity for an Azure VM, using the Azure portal. Assigning and removing user assigned identities from Azure VMs is not currently supported via the Azure Portal.
-
-> [!NOTE]
-> Currently, user assigned identity operations are not supported via the Azure Portal. Check back for updates. 
+In this article, you learn how to enable and disable system and user assigned identity for an Azure Virtual Machine (VM), using the Azure portal. 
 
 ## Prerequisites
 
@@ -35,16 +32,18 @@ In this article, you will learn how to enable and disable the system assigned id
 - To perform the management operations in this article, your account needs the following role assignment:
     - [Virtual Machine Contributor](/azure/role-based-access-control/built-in-roles#virtual-machine-contributor) to enable and remove system assigned identity from an Azure VM.
 
-## Managed Service Identity during creation of an Azure VM
+## System assigned identity
+
+In this section, you learn how to enable and disable the system assigned identity for VM using the Azure portal.
+
+### Enable system assigned identity during creation of a VM
 
-Currently, VM creation via the Azure portal does not support Managed Service Identity operations. Instead, please refer to one of the following VM creation Quickstart articles to first create a VM:
+Currently, the Azure portal does not support enabling system assigned identity during the creation of a VM. Instead, refer to one of the following VM creation Quickstart articles to first create a VM, and then proceed to the next section for details on enabling system assigned identity on the VM:
 
 - [Create a Windows virtual machine with the Azure portal](../../virtual-machines/windows/quick-create-portal.md#create-virtual-machine)
 - [Create a Linux virtual machine with the Azure portal](../../virtual-machines/linux/quick-create-portal.md#create-virtual-machine)  
 
-Then proceed to the next section for details on enabling Managed Service Identity on the VM.
-
-## Enable Managed Service Identity on an existing Azure VM
+### Enable system assigned identity on an existing VM
 
 To enable the system assigned identity on a VM that was originally provisioned without it:
 
@@ -54,12 +53,9 @@ To enable the system assigned identity on a VM that was originally provisioned w
 
 3. Enable the system assigned identity on the VM by selecting "Yes" under "Managed service identity" and then click **Save**. This operation can take 60 seconds or more to complete:
 
-   > [!NOTE]
-   > Adding a user assigned identity to a VM is not currently supported via the Azure Portal.
-
    ![Configuration page screenshot](../managed-service-identity/media/msi-qs-configure-portal-windows-vm/create-windows-vm-portal-configuration-blade.png)  
 
-## Remove Managed Service Identity from an Azure VM
+### Remove system assigned identity from a VM
 
 If you have a Virtual Machine that no longer needs the system assigned identity:
 
@@ -69,10 +65,36 @@ If you have a Virtual Machine that no longer needs the system assigned identity:
 
 3. Disable the system assigned identity on the VM by selecting "No" under "Managed service identity", then click Save. This operation can take 60 seconds or more to complete:
 
-    > [!NOTE]
-    > Adding a user assigned identity to a VM is not currently supported via the Azure Portal.
+   ![Configuration page screenshot](../managed-service-identity/media/msi-qs-configure-portal-windows-vm/create-windows-vm-portal-configuration-blade-disable.png)
+
+## User assigned identity
+
+ In this section, you learn how to add and remove a user assigned identity from a VM using the Azure portal.
+
+### Assign a user assigned identity during the creation of a VM
+
+Currently, the Azure portal does not support assigning a user assigned identity during the creation of a VM. Instead, refer to one of the following VM creation Quickstart articles to first create a VM, and then proceed to the next section for details on assigning a user assigned identity to the VM:
+
+- [Create a Windows virtual machine with the Azure portal](../../virtual-machines/windows/quick-create-portal.md#create-virtual-machine)
+- [Create a Linux virtual machine with the Azure portal](../../virtual-machines/linux/quick-create-portal.md#create-virtual-machine)
+
+### Assign a user assigned identity to an existing VM
+
+1. Sign in to the [Azure portal](https://portal.azure.com) using an account associated with the Azure subscription that contains the VM.
+2. Navigate to the desired VM and click **Identity**, **User assigned** and then **\+Add**.
+
+   ![Add user assigned identity to VM](./media/msi-qs-configure-portal-windows-vm/add-user-assigned-identity-vm-screenshot1.png)
+
+3. Click the user assigned identity you want to add to the VM and then click **Add**.
+
+    ![Add user assigned identity to VM](./media/msi-qs-configure-portal-windows-vm/add-user-assigned-identity-vm-screenshot2.png)
+
+### Remove a user assigned identity from a VM
+
+1. Sign in to the [Azure portal](https://portal.azure.com) using an account associated with the Azure subscription that contains the VM.
+2. Navigate to the desired VM and click **Identity**, **User assigned**, the name of the user assigned identity you want to delete and then click **Remove** (click **Yes** in the confirmation pane).
 
-   ![Configuration page screenshot](../managed-service-identity/media/msi-qs-configure-portal-windows-vm/create-windows-vm-portal-configuration-blade-disable.png)  
+   ![Remove user assigned identity from a VM](./media/msi-qs-configure-portal-windows-vm/remove-user-assigned-identity-vm-screenshot.png)
 
 ## Related content
 

articles/active-directory/managed-service-identity/media/msi-qs-configure-portal-windows-vm/add-user-assigned-identity-vm-screenshot2.png

@@ -23,10 +23,7 @@ ms.author: daveba
 
 Managed Service Identity provides Azure services with an automatically managed identity in Azure Active Directory. You can use this identity to authenticate to any service that supports Azure AD authentication, without having credentials in your code. 
 
-In this article, you will learn how to enable and disable the system assigned identity for a virtual machine scale set, using the Azure portal. Assigning and removing user assigned identities from an Azure virtual machine scale set is not currently supported via the Azure portal.
-
-> [!NOTE]
-> Currently, user assigned identity operations are not supported via the Azure Portal. Check back for updates.
+In this article, you learn how to enable and disable system and user assigned identity for a virtual machine scale set using the Azure portal.
 
 ## Prerequisites
 
@@ -35,17 +32,19 @@ In this article, you will learn how to enable and disable the system assigned id
 - To perform the management operations in this article, your account needs the following role assignment:
     - [Virtual Machine Contributor](/azure/role-based-access-control/built-in-roles#virtual-machine-contributor) to enable and remove system assigned managed identity from a virtual machine scale set.
 
-## Managed Service Identity during creation of an Azure virtual machine scale set
+## System assigned identity 
 
-Currently, VM creation via the Azure portal does not support Managed Service Identity operations. Instead, please refer to the following Azure virtual machine scale set creation Quickstart article to first create an Azure virtual machine scale set:
+In this section, you will learn how to enable and disable the system assigned identity on a virtual machine scale set using the Azure portal.
 
-- [Create a Virtual Machine Scale Set in the Azure portal](../../virtual-machine-scale-sets/quick-create-portal.md)  
+### Enable system assigned identity during creation of a virtual machine scale set
 
-Then proceed to the next section for details on enabling Managed Service Identity on the virtual machine scale set.
+Currently, the Azure portal does not support enabling system assigned identity during the creation of a virtual machine scale set. Instead, refer to the following virtual machine scale set creation Quickstart article to first create a virtual machine scale set, and then proceed to the next section for details on enabling system assigned identity on a virtual machine scale set:
 
-## Enable Managed Service Identity on an existing Azure VMMS
+- [Create a Virtual Machine Scale Set in the Azure portal](../../virtual-machine-scale-sets/quick-create-portal.md)  
 
-To enable the system assigned identity on a VM that was originally provisioned without it:
+### Enable system assigned identity on an existing virtual machine scale set
+
+To enable the system assigned identity on a virtual machine scale set that was originally provisioned without it:
 
 1. Sign in to the [Azure portal](https://portal.azure.com) using an account associated with the Azure subscription that contains the virtual machine scale set.
 
@@ -55,17 +54,46 @@ To enable the system assigned identity on a VM that was originally provisioned w
 
    [![Configuration page screenshot](../managed-service-identity/media/msi-qs-configure-portal-windows-vmss/create-windows-vmss-portal-configuration-blade.png)](../managed-service-identity/media/msi-qs-configure-portal-windows-vmss/create-windows-vmss-portal-configuration-blade.png#lightbox)  
 
-## Remove Managed Service Identity from an Azure virtual machine scale set
+### Remove system assigned identity from a virtual machine scale set
 
-If you have a virtual machine scale set that no longer needs a Managed Service Identity:
+If you have a virtual machine scale set that no longer needs a system assigned identity:
 
 1. Sign in to the [Azure portal](https://portal.azure.com) using an account associated with the Azure subscription that contains the virtual machine scale set. Also make sure your account belongs to a role that gives you write permissions on the virtual machine scale set.
 
 2. Navigate to the desired virtual machine scale set.
 
 3. Disable the system assigned identity on the VM by selecting "No" under "Managed service identity", then click Save. This operation can take 60 seconds or more to complete:
 
-   ![Configuration page screenshot](../managed-service-identity/media/msi-qs-configure-portal-windows-vmss/disable-windows-vmss-portal-configuration-blade.png)  
+   ![Configuration page screenshot](../managed-service-identity/media/msi-qs-configure-portal-windows-vmss/disable-windows-vmss-portal-configuration-blade.png)
+
+## User assigned identity
+
+In this section, you learn how to add and remove a user assigned identity from a virtual machine scale set using the Azure portal.
+
+### Assign a user assigned identity during the creation of a virtual machine scale set
+
+Currently, the Azure portal does not support assigning a user assigned identity during the creation of a virtual machine scale set. Instead, refer to the following virtual machine scale set creation Quickstart article to first create a virtual machine scale set, and then proceed to the next section for details on assigning a user assigned identity to it:
+
+- [Create a Virtual Machine Scale Set in the Azure portal](../../virtual-machine-scale-sets/quick-create-portal.md)
+
+### Assign a user assigned identity to an existing virtual machine scale set
+
+1. Sign in to the [Azure portal](https://portal.azure.com) using an account associated with the Azure subscription that contains the virtual machine scale set.
+2. Navigate to the desired virtual machine scale set and click **Identity**, **User assigned** and then **\+Add**.
+
+   ![Add user assigned identity to VMSS](./media/msi-qs-configure-portal-windows-vm/add-user-assigned-identity-vmss-screenshot1.png)
+
+3. Click the user assigned identity you want to add to the virtual machine scale set and then click **Add**.
+   
+   ![Add user assigned identity to VMSS](./media/msi-qs-configure-portal-windows-vm/add-user-assigned-identity-vm-screenshot2.png)
+
+### Remove a user assigned identity from a virtual machine scale set
+
+1. Sign in to the [Azure portal](https://portal.azure.com) using an account associated with the Azure subscription that contains the VM.
+2. Navigate to the desired virtual machine scale set and click **Identity**, **User assigned**, the name of the user assigned identity you want to delete and then click **Remove** (click **Yes** in the confirmation pane).
+
+   ![Remove user assigned identity from a VMSS](./media/msi-qs-configure-portal-windows-vm/remove-user-assigned-identity-vmss-screenshot.png)
+
 
 ## Related Content