Fix pivot and code issues

ggailey777 · ggailey777 · commit c0026ec374e8 · 2025-07-06T09:43:47.000-07:00
diff --git a/articles/azure-functions/how-to-create-function-azure-cli.md b/articles/azure-functions/how-to-create-function-azure-cli.md
@@ -28,38 +28,40 @@ Before you begin, you must have the following:
 ## Create a local function project and function
 
 In Azure Functions, a function project is a container for one or more individual functions that each responds to a specific trigger. All functions in a project share the same local and hosting configurations. In this section, you create a function project that contains a single function.
-::: zone pivot="programming-language-csharp,programming-language-javascript,programming-language-typescript,programming-language-powershell,programming-language-python"  
-1. In a terminal or command prompt, run this [`func init`](./functions-core-tools-reference.md#func-init) command to create a function app project in the current folder:  
-::: zone-end  
 ::: zone pivot="programming-language-csharp" 
+1. In a terminal or command prompt, run this [`func init`](./functions-core-tools-reference.md#func-init) command to create a function app project in the current folder:  
  
     ```console
     func init --worker-runtime dotnet-isolated 
     ```
 
 ::: zone-end  
 ::: zone pivot="programming-language-javascript"  
-
+1. In a terminal or command prompt, run this [`func init`](./functions-core-tools-reference.md#func-init) command to create a function app project in the current folder:  
+ 
     ```console
     func init --worker-runtime node --language javascript 
     ```
 
 ::: zone-end  
 ::: zone pivot="programming-language-powershell"  
-
+1. In a terminal or command prompt, run this [`func init`](./functions-core-tools-reference.md#func-init) command to create a function app project in the current folder:  
+ 
     ```console
     func init --worker-runtime powershell 
     ```
 
 ::: zone-end  
 ::: zone pivot="programming-language-python"  
-
+1. In a terminal or command prompt, run this [`func init`](./functions-core-tools-reference.md#func-init) command to create a function app project in the current folder:  
+ 
     ```console
     func init --worker-runtime python 
     ```
 
 ::: zone-end  
 ::: zone pivot="programming-language-typescript" 
+ 1. In a terminal or command prompt, run this [`func init`](./functions-core-tools-reference.md#func-init) command to create a function app project in the current folder:  
  
     ```console
     func init --worker-runtime node --language typescript 
@@ -184,7 +186,7 @@ In Azure Functions, a function project is a container for one or more individual
 
 To enable the Functions host to connect to the default storage account using shared secrets, you must replace the `AzureWebJobsStorage` connection string setting with a complex setting, prefixed with `AzureWebJobsStorage`, that uses the user-assigned managed identity to connect to the storage account.
 
-1. Use this script to get the client ID of the user-assigned managed identity, and with it define a managed identity connections to storage and Application Insights:
+1. Use this script to get the client ID of the user-assigned managed identity and uses it to define managed identity connections to both storage and Application Insights:
  
     ```azurecli
     clientId=$(az identity show --name func-host-storage-user \
diff --git a/includes/functions-create-azure-resources-flex-cli.md b/includes/functions-create-azure-resources-flex-cli.md
@@ -15,7 +15,7 @@ Before you can deploy your function code to Azure, you need to create these reso
 - A [user-assigned managed identity](/azure/active-directory/managed-identities-azure-resources/overview), which the Functions host uses to connect to the default storage account.
 - A function app, which provides the environment for executing your function code. A function app maps to your local function project and lets you group functions as a logical unit for easier management, deployment, and sharing of resources.
 
-Use the following commands to create these items. Both Azure CLI and PowerShell are supported.
+Use the Azure CLI commands in these steps to create the required resources.
 
 1. If you haven't done so already, sign in to Azure:
 
@@ -38,17 +38,21 @@ Use the following commands to create these items. Both Azure CLI and PowerShell
     ---
     -->
 
-1. If you haven't already done so, install the Application Insights extension:
+1. If you haven't already done so, use this [`az extension add`](/cli/azure/extension#az-extension-add) command to install the Application Insights extension:
 
-    :::code language="azurecli" source="~/azure_cli_scripts/azure-functions/create-function-app-flex-plan-identities/create-function-app-flex-plan-identities.md" range="12":::
+    ```azurecli
+    az extension add --name application-insights
+    ```
 
-1. Create a resource group named `AzureFunctionsQuickstart-rg` in your chosen region:
+1. Use this [az group create](/cli/azure/group#az-group-create) command to create a resource group named `AzureFunctionsQuickstart-rg` in your chosen region:
     <!---
     ### [Azure CLI](#tab/azure-cli)-->
     
-    :::code language="azurecli" source="~/azure_cli_scripts/azure-functions/create-function-app-flex-plan-identities/create-function-app-flex-plan-identities.md" range="15":::
+    ```azurecli
+    az group create --name "AzureFunctionsQuickstart-rg" --location "<REGION>"
+    ```
  
-    The [az group create](/cli/azure/group#az-group-create) command creates a resource group. In the above command, replace `<REGION>` with a region near you that supports the Flex Consumption plan. Use an available region code returned from the [az functionapp list-flexconsumption-locations](/cli/azure/functionapp#az-functionapp-list-flexconsumption-locations) command.
+    In this example, replace `<REGION>` with a region near you that supports the Flex Consumption plan. Use the [az functionapp list-flexconsumption-locations](/cli/azure/functionapp#az-functionapp-list-flexconsumption-locations) command to view the list of currently supported regions.
     <!---
     ### [Azure PowerShell](#tab/azure-powershell)
 
@@ -61,13 +65,16 @@ Use the following commands to create these items. Both Azure CLI and PowerShell
     ---
     -->
 
-1. Create a general-purpose storage account in your resource group and region:
+1. Use this [az storage account create](/cli/azure/storage/account#az-storage-account-create) command to create a general-purpose storage account in your resource group and region:
     <!---
     ### [Azure CLI](#tab/azure-cli)
     -->
-    :::code language="azurecli" source="~/azure_cli_scripts/azure-functions/create-function-app-flex-plan-identities/create-function-app-flex-plan-identities.md" range="18-19":::
+    ```azurecli
+    az storage account create --name <STORAGE_NAME> --location "<REGION>" --resource-group "AzureFunctionsQuickstart-rg" \
+    --sku "Standard_LRS" --allow-blob-public-access false --allow-shared-key-access false
+    ```
 
-    This [az storage account create](/cli/azure/storage/account#az-storage-account-create) command creates a storage account. 
+     
     <!---
     ### [Azure PowerShell](#tab/azure-powershell)
 
@@ -82,55 +89,62 @@ Use the following commands to create these items. Both Azure CLI and PowerShell
 
     In this example, replace `<STORAGE_NAME>` with a name that is appropriate to you and unique in Azure Storage. Names must contain three to 24 characters numbers and lowercase letters only. `Standard_LRS` specifies a general-purpose account, which is [supported by Functions](../articles/azure-functions/storage-considerations.md#storage-account-requirements). This new account can only be accessed by using Microsoft Entra-authenticated identities that have been granted permissions to specific resources. 
 
-1. Create a user-assigned managed identity, then capture and parse the returned JSON properties of the object using `jq`: 
+1. Use this script to create a user-assigned managed identity, parse the returned JSON properties of the object using `jq`, and grant `Storage Blob Data Owner` permissions in the default storage account: 
 
-    :::code language="azurecli" source="~/azure_cli_scripts/azure-functions/create-function-app-flex-plan-identities/create-function-app-flex-plan-identities.md" range="22-23,26-28":::
+    ```azurecli  
+    output=$(az identity create --name "func-host-storage-user" --resource-group "AzureFunctionsQuickstart-rg" --location <REGION> \
+    --query "{userId:id, principalId: principalId, clientId: clientId}" -o json)
 
-    If you don't have the `jq` utility in your local Bash shell, it's available in Azure Cloud Shell. The [az identity create](/cli/azure/identity#az-identity-create) command creates a new identity in the resource group named `func-host-storage-user`. The returned `principalId` is used to assign permissions to this new identity in the default storage account by using the [`az role assignment create`](/cli/azure/role/assignment#az-role-assignment-create) command. The [`az storage account show`](/cli/azure/storage/account#az-storage-account-show) command is used to obtain the storage account ID. 
+    userId=$(echo $output | jq -r '.userId')
+    principalId=$(echo $output | jq -r '.principalId')
+    clientId=$(echo $output | jq -r '.clientId')
 
-1. Grant to the new identity the required access in the default storage account by using the built-in `Storage Blob Data Owner` role:
+    storageId=$(az storage account show --resource-group "AzureFunctionsQuickstart-rg" --name <STORAGE_NAME> --query 'id' -o tsv)
+    az role assignment create --assignee-object-id $principalId --assignee-principal-type ServicePrincipal \
+    --role "Storage Blob Data Owner" --scope $storageId
+    ```
 
-    :::code language="azurecli" source="~/azure_cli_scripts/azure-functions/create-function-app-flex-plan-identities/create-function-app-flex-plan-identities.md" range="31-33":::
+    If you don't have the `jq` utility in your local Bash shell, it's available in Azure Cloud Shell. In this example, replace `<STORAGE_NAME>` and `<REGION>` with your default storage account name and region, respectively.
 
-    In this example, replace `<STORAGE_NAME>` and `<REGION>` with your default storage account name and region, respectively. 
+    The [az identity create](/cli/azure/identity#az-identity-create) command creates an identity named `func-host-storage-user`. The returned `principalId` is used to assign permissions to this new identity in the default storage account by using the [`az role assignment create`](/cli/azure/role/assignment#az-role-assignment-create) command. The [`az storage account show`](/cli/azure/storage/account#az-storage-account-show) command is used to obtain the storage account ID. 
 
-1. Use the [az functionapp create](/cli/azure/functionapp#az-functionapp-create) command to create the function app in Azure:
+1. Use this [az functionapp create](/cli/azure/functionapp#az-functionapp-create) command to create the function app in Azure:
     <!---Replace tabs when PowerShell cmdlets support Flex Consumption plans.
     ### [Azure CLI](#tab/azure-cli)
     -->
     ::: zone pivot="programming-language-csharp"
     ```azurecli
     az functionapp create --resource-group "AzureFunctionsQuickstart-rg" --name <APP_NAME> --flexconsumption-location <REGION> \
     --runtime dotnet-isolated --runtime-version <LANGUAGE_VERSION> --storage-account <STORAGE_NAME> \
-    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value <USER_NAME>
+    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value "func-host-storage-user"
     ```
     ::: zone-end
     ::: zone pivot="programming-language-java" 
     ```azurecli
     az functionapp create --resource-group "AzureFunctionsQuickstart-rg" --name <APP_NAME> --flexconsumption-location <REGION> \
     --runtime java --runtime-version <LANGUAGE_VERSION> --storage-account <STORAGE_NAME> \
-    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value <USER_NAME>
+    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value "func-host-storage-user"
     ```
     ::: zone-end
     ::: zone pivot="programming-language-javascript,programming-language-typescript" 
     ```azurecli
     az functionapp create --resource-group "AzureFunctionsQuickstart-rg" --name <APP_NAME> --flexconsumption-location <REGION> \
     --runtime node --runtime-version <LANGUAGE_VERSION> --storage-account <STORAGE_NAME> \
-    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value <USER_NAME>
+    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value "func-host-storage-user"
     ```
     ::: zone-end
     ::: zone pivot="programming-language-python" 
     ```azurecli
     az functionapp create --resource-group "AzureFunctionsQuickstart-rg" --name <APP_NAME> --flexconsumption-location <REGION> \
     --runtime python --runtime-version <LANGUAGE_VERSION> --storage-account <STORAGE_NAME> \
-    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value <USER_NAME>
+    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value "func-host-storage-user"
     ```
     ::: zone-end
     ::: zone pivot="programming-language-powershell" 
     ```azurecli
     az functionapp create --resource-group "AzureFunctionsQuickstart-rg" --name <APP_NAME> --flexconsumption-location <REGION> \
     --runtime python --runtime-version <LANGUAGE_VERSION> --storage-account <STORAGE_NAME> \
-    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value <USER_NAME>
+    --deployment-storage-auth-type UserAssignedIdentity --deployment-storage-auth-value "func-host-storage-user"
     ```
     ::: zone-end
     <!---
@@ -144,18 +158,23 @@ Use the following commands to create these items. Both Azure CLI and PowerShell
 
     ---
     -->
-    In this example, replace these placeholders:
+    In this example, replace these placeholders with the appropriate values:
 
+    + `<APP_NAME>`: a globally unique name appropriate to you. The `<APP_NAME>` is also the default DNS domain for the function app.
     + `<STORAGE_NAME>`: the name of the account you used in the previous step.
-    + `<REGION>`: your region. 
-    + `<APP_NAME>`: a globally unique name appropriate to you. The `<APP_NAME>` is also the default DNS     domain for the function app.
-    + `<USER_NAME>`: the name of the user-assigned managed identity.
-    + `<LANGUAGE_VERSION>`: use the [supported language stack version](../articles/azure-functions/supported-languages.md) you verified locally.
+    + `<REGION>`: your current region. 
+    + `<LANGUAGE_VERSION>`: use the same [supported language stack version](../articles/azure-functions/supported-languages.md) you verified locally.
 
-    This command creates a function app running in your specified language runtime on Linux in the [Flex Consumption Plan](../articles/azure-functions/flex-consumption-plan.md), which is free for the amount of usage you incur here. The command also creates an associated Azure Application Insights instance in the same resource group, with which you can monitor your function app and view logs. For more information, see [Monitor Azure Functions](../articles/azure-functions/functions-monitoring.md). The instance incurs no costs until you activate it.
+    This command creates a function app running in your specified language runtime on Linux in the [Flex Consumption Plan](../articles/azure-functions/flex-consumption-plan.md), which is free for the amount of usage you incur here. The command also creates an associated Azure Application Insights instance in the same resource group, with which you can use to monitor your function app executions and view logs. For more information, see [Monitor Azure Functions](../articles/azure-functions/functions-monitoring.md). The instance incurs no costs until you activate it.
 
-1. Add your user-assigned managed identity to the [Monitoring Metrics Publisher](../articles/role-based-access-control/built-in-roles/monitor.md#monitoring-metrics-publisher) role in your Application Insights instance:
+1. Use this script to add your user-assigned managed identity to the [Monitoring Metrics Publisher](../articles/role-based-access-control/built-in-roles/monitor.md#monitoring-metrics-publisher) role in your Application Insights instance:
 
-    :::code language="azurecli" source="~/azure_cli_scripts/azure-functions/create-function-app-flex-plan-identities/create-function-app-flex-plan-identities.md" range="42-44":::
+    ```azurecli
+    appInsights=$(az monitor app-insights component show --resource-group "AzureFunctionsQuickstart-rg" \
+        --app <APP_NAME> --query "id" --output tsv)
+    principalId=$(az identity show --name "func-host-storage-user" --resource-group "AzureFunctionsQuickstart-rg" \
+        --query principalId -o tsv)
+    az role assignment create --role "Monitoring Metrics Publisher" --assignee $principalId --scope $appInsights
+    ```
 
-    The [az role assignment create](/cli/azure/role/assignment#az-role-assignment-create) command adds your user to the role. The resource ID of your Application Insights instance is obtained by using [az monitor app-insights component show](/cli/azure/monitor/app-insights/component#az-monitor-app-insights-component-show).
+    In this example, replace `<APP_NAME>` with the name of your function app. The [az role assignment create](/cli/azure/role/assignment#az-role-assignment-create) command adds your user to the role. The resource ID of your Application Insights instance and the principal ID of your user are obtained by using the [az monitor app-insights component show](/cli/azure/monitor/app-insights/component#az-monitor-app-insights-component-show) and [`az identity show`](/cli/azure/identity#az-identity-show) commands, respectively. 
