Skip to content

Commit e01b920

Browse files
authored
Update file-sync-managed-identities.md
1 parent 568d6f3 commit e01b920

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/storage/file-sync/file-sync-managed-identities.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ When you enable this configuration, the system-assigned managed identities will
1919
- Registered server authentication to Azure file share
2020
- Registered server authentication to Storage Sync Service
2121

22-
To learn more about the benefits of using managed identities, see [Managed identities for Azure resources](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/overview).
22+
To learn more about the benefits of using managed identities, see [Managed identities for Azure resources](../../entra/identity/managed-identities-azure-resources/overview.md).
2323

2424
To configure your Azure File Sync deployment to utilize system-assigned managed identities, please follow the guidance in the subsequent sections.
2525

@@ -38,11 +38,11 @@ To configure your Azure File Sync deployment to utilize system-assigned managed
3838
```
3939
4040
## Enable a system-assigned managed identity on your registered servers
41-
Before you can configure Azure File Sync to use managed identities, your registered servers must have a system-assigned managed identity that will be used to access the Azure File Sync service and Azure file shares.
41+
Before you can configure Azure File Sync to use managed identities, your registered servers must have a system-assigned managed identity that will be used to authenticate to the Azure File Sync service and Azure file shares.
4242
4343
To enable a system-assigned managed identity on a registered server that has the Azure File Sync v19 agent installed, perform the following steps:
44-
- If the server is hosted outside of Azure, it must be an **Azure Arc-enabled server** to have a system-assigned managed identity. For more information on Azure Arc-enabled servers and how to install the Azure Connected Machine agent, see: [Azure Arc-enabled servers Overview](https://learn.microsoft.com/azure/azure-arc/servers/overview).
45-
- If the server is an Azure virtual machine, **enable the system-assigned managed identity setting on the VM**. For more information, see: [Configure managed identities on Azure virtual machines](https://learn.microsoft.com/entra/identity/managed-identities-azure-resources/how-to-configure-managed-identities?pivots=qs-configure-portal-windows-vm#enable-system-assigned-managed-identity-on-an-existing-vm).
44+
- If the server is hosted outside of Azure, it must be an **Azure Arc-enabled server** to have a system-assigned managed identity. For more information on Azure Arc-enabled servers and how to install the Azure Connected Machine agent, see: [Azure Arc-enabled servers Overview](../../azure-arc/servers/overview.md).
45+
- If the server is an Azure virtual machine, **enable the system-assigned managed identity setting on the VM**. For more information, see: [Configure managed identities on Azure virtual machines](../../entra/identity/managed-identities-azure-resources/how-to-configure-managed-identities.md#enable-system-assigned-managed-identity-on-an-existing-vm).
4646
4747
> [!NOTES]
4848
> - At least one registered server must have a system-assigned managed identity before you can configure the Storage Sync Service to use a system-assigned identity.
@@ -61,7 +61,7 @@ Verify the **LatestApplicationId** property has a GUID which indicates the serve
6161
If the value for the **ActiveAuthType** property is **Certificate** and the **LatestApplicationId** does not have a GUID, the server does not have a system-assigned managed identity and will use shared keys to authenticate to the Azure file share.
6262

6363
> [!NOTE]
64-
> Once a server is configured to use the system-assigned managed identity by following the steps in the section below, the **LatestApplicationId** property is longer used (will be empty), the **ActiveAuthType** property value will be changed to **ManagedIdentity** and the **ApplicationId** property will have the GUID for the system-assigned managed identity.
64+
> Once a server is configured to use the system-assigned managed identity by following the steps in the section below, the **LatestApplicationId** property is longer used (will be empty), the **ActiveAuthType** property value will be changed to **ManagedIdentity** and the **ApplicationId** property will have a GUID which is the system-assigned managed identity.
6565
6666
## Configure your Azure File Sync deployment to use system-assigned managed identities
6767
To configure the Storage Sync Service and registered servers to use a system-assigned managed identities, run the following command from an elevated PowerShell window:
@@ -104,6 +104,6 @@ Verify the **ApplicationId** property has a GUID which indicates the server is c
104104
> Once the registered server(s) are configured to use a system-assigned managed identity, it can take up to one hour before the server uses the system-assigned managed identity to authenticate to the Storage Sync Service and Azure file shares.
105105
106106
## More Information
107-
Once the Storage Sync Service and registered server(s) are configured to use a system-assigned managed identity, new endpoints (cloud or server) that are created will use a system-assigned managed identity to authenticate to the Azure file share.
108-
109-
If you experience issues, see Troubleshoot Azure File Sync managed identity issues.
107+
Once the Storage Sync Service and registered server(s) are configured to use a system-assigned managed identity:
108+
- New endpoints (cloud or server) that are created will use a system-assigned managed identity to authenticate to the Azure file share.
109+
- Use the Set-AzStorageSyncServiceIdentity cmdlet anytime you need to configure additional registered servers to use managed identities.

0 commit comments

Comments
 (0)