Skip to content

Commit f092eaa

Browse files
Merge pull request #224252 from barclayn/mi-refresh-january-2023
minor updates and manager field
2 parents 6758337 + e5251f4 commit f092eaa

File tree

2 files changed

+14
-4
lines changed

2 files changed

+14
-4
lines changed

articles/active-directory/managed-identities-azure-resources/how-to-view-associated-resources-for-an-identity.md

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Step-by-step instructions for viewing the Azure resources that are
44
services: active-directory
55
documentationcenter: ''
66
author: barclayn
7-
manager: daveba
7+
manager: amycolannino
88
editor: ''
99

1010
ms.service: active-directory
@@ -13,7 +13,7 @@ ms.devlang: na
1313
ms.topic: how-to
1414
ms.tgt_pltfrm: na
1515
ms.workload: identity
16-
ms.date: 06/20/2022
16+
ms.date: 01/18/2023
1717
ms.author: barclayn
1818
ms.collection: M365-identity-device-management
1919
---
@@ -44,6 +44,7 @@ Being able to quickly see which Azure resources are associated with a user-assig
4444
Select the resource name to be brought to its summary page.
4545

4646
#### Filtering and sorting by resource type
47+
4748
Filter the resources by typing in the filter box at the top of the summary page. You can filter by the name, type, resource group, and subscription ID.
4849

4950
Select the column title to sort alphabetically, ascending or descending.
@@ -69,12 +70,14 @@ https://management.azure.com/subscriptions/{resourceID of user-assigned identity
6970
| $skip | 50 | The number of items you want to skip while paging through the results. |
7071
| $top | 10 | The number of resources to return. 0 will return only a count of the resources. |
7172

72-
Below is a sample request to the REST API:
73+
You can see a sample request to the REST API:
74+
7375
```http
7476
POST https://management.azure.com/subscriptions/aab111d1-1111-43e2-8d11-3bfc47ab8111/resourceGroups/devrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/devIdentity/listAssociatedResources?$filter={filter}&$orderby={orderby}&$skip={skip}&$top={top}&skipToken={skipToken}&api-version=2021-09-30-preview
7577
```
7678

77-
Below is a sample response from the REST API:
79+
Notice a sample response from the REST API:
80+
7881
```json
7982
{
8083
"totalCount": 2,
@@ -101,12 +104,15 @@ Below is a sample response from the REST API:
101104
```
102105

103106
### Command Line Interface
107+
104108
To view the associated resources for a user-assigned managed identity, run the following command:
109+
105110
```azurecli
106111
az identity list-resources --resource-group <ResourceGroupName> --name <ManagedIdentityName>
107112
```
108113

109114
The response will look like this:
115+
110116
```json
111117
[
112118
{
@@ -153,6 +159,7 @@ The response will look like this:
153159
```
154160

155161
### REST API using PowerShell
162+
156163
There's no specific PowerShell command for returning the associated resources of a managed identity, but you can use the REST API in PowerShell by using the following command:
157164

158165
```PowerShell
@@ -163,13 +170,15 @@ Invoke-AzRestMethod -Path "/subscriptions/XXX-XXX-XXX-XXX/resourceGroups/test-rg
163170
> All resources associated with an identity will be returned, regardless of the user's permissions. The user only needs to have access to read the managed identity. This means that more resources may be visible than the user can see elsewhere in the portal. This is to provide full visibility of the identity's usage. If the user doesn't have access to an associated resource, an error will be displayed if they try to access it from the list.
164171
165172
## Delete a user-assigned managed identity
173+
166174
When you select the delete button for a user-assigned managed identity, you'll see a list of up to 10 associated resources for that identity. The full count will be displayed at the top of the pane. This list allows you to see which resources will be affected by deleting the identity. You'll be asked to confirm your decision.
167175

168176
:::image type="content" source="media/viewing-associated-resources/associated-resources-delete.png" alt-text="Screenshot showing the delete confirmation screen for a user-assigned managed identity.":::
169177

170178
This confirmation process is only available in the portal. To view an identity's resources before deleting it using the REST API, retrieve the list of resources manually in advance.
171179

172180
## Limitations
181+
173182
- This functionality is available in all public regions, and will be available in USGov and China in the coming weeks.
174183
- API requests for associated resources are limited to one per second per tenant. If you exceed this limit, you may receive a `HTTP 429` error. This limit doesn't apply to retrieving a list of user-assigned managed identities.
175184
- Azure Resources types that are in preview, or their support for Managed identities is in preview, may not appear in the associated resources list until fully generally available. This list includes Service Fabric clusters, Blueprints, and Machine learning services.

articles/active-directory/managed-identities-azure-resources/index.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ metadata:
1212
ms.topic: landing-page
1313
author: barclayn
1414
ms.author: barclayn
15+
manager: amycolannino
1516
ms.date: 08/29/2019
1617
ms.collection: M365-identity-device-management
1718

0 commit comments

Comments
 (0)