Skip to content

Commit dc2cc3b

Browse files
committed
updating FAQ with a new question around the usage of managed identities in multiple azure regions
1 parent e103ecf commit dc2cc3b

File tree

1 file changed

+5
-1
lines changed
  • articles/active-directory/managed-identities-azure-resources

1 file changed

+5
-1
lines changed

articles/active-directory/managed-identities-azure-resources/known-issues.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.devlang:
1313
ms.topic: conceptual
1414
ms.tgt_pltfrm:
1515
ms.workload: identity
16-
ms.date: 12/01/2020
16+
ms.date: 02/04/2021
1717
ms.author: barclayn
1818
ms.collection: M365-identity-device-management
1919
ms.custom: has-adal-ref
@@ -45,6 +45,10 @@ Managed Identities for Azure resources have only one of those components: A Serv
4545

4646
Managed identities don't have an application object in the directory, which is what is commonly used to grant app permissions for MS graph. Instead, MS graph permissions for managed identities need to be granted directly to the Service Principal.
4747

48+
### Can the same managed identity be used across multiple regions?
49+
50+
In short, yes you can use user assigned managed identities in more than one Azure region. The longer answer is that while user assigned managed identities are created as regional resources the associated [service principal](../develop/app-objects-and-service-principals.md#service-principal-object) (SPN) created in Azure AD is available globally. The service principal can be used from any Azure region and its availability is dependent on the availability of Azure AD. For example, if you created a user assigned managed identity in the South-Central region and that region becomes unavailable this issue only impacts [control plane](../../azure-resource-manager/management/control-plane-and-data-plane.md) activities on the managed identity itself. The activities performed by any resources already configured to use the managed identities would not be impacted.
51+
4852
### Does managed identities for Azure resources work with Azure Cloud Services?
4953

5054
No, there are no plans to support managed identities for Azure resources in Azure Cloud Services.

0 commit comments

Comments
 (0)