You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/managed-identities-azure-resources/how-to-view-associated-resources-for-an-identity.md
+13-4Lines changed: 13 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Step-by-step instructions for viewing the Azure resources that are
4
4
services: active-directory
5
5
documentationcenter: ''
6
6
author: barclayn
7
-
manager: daveba
7
+
manager: amycolannino
8
8
editor: ''
9
9
10
10
ms.service: active-directory
@@ -13,7 +13,7 @@ ms.devlang: na
13
13
ms.topic: how-to
14
14
ms.tgt_pltfrm: na
15
15
ms.workload: identity
16
-
ms.date: 06/20/2022
16
+
ms.date: 01/18/2023
17
17
ms.author: barclayn
18
18
ms.collection: M365-identity-device-management
19
19
---
@@ -44,6 +44,7 @@ Being able to quickly see which Azure resources are associated with a user-assig
44
44
Select the resource name to be brought to its summary page.
45
45
46
46
#### Filtering and sorting by resource type
47
+
47
48
Filter the resources by typing in the filter box at the top of the summary page. You can filter by the name, type, resource group, and subscription ID.
48
49
49
50
Select the column title to sort alphabetically, ascending or descending.
@@ -69,12 +70,14 @@ https://management.azure.com/subscriptions/{resourceID of user-assigned identity
69
70
| $skip | 50 | The number of items you want to skip while paging through the results. |
70
71
| $top | 10 | The number of resources to return. 0 will return only a count of the resources. |
71
72
72
-
Below is a sample request to the REST API:
73
+
You can see a sample request to the REST API:
74
+
73
75
```http
74
76
POST https://management.azure.com/subscriptions/aab111d1-1111-43e2-8d11-3bfc47ab8111/resourceGroups/devrg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/devIdentity/listAssociatedResources?$filter={filter}&$orderby={orderby}&$skip={skip}&$top={top}&skipToken={skipToken}&api-version=2021-09-30-preview
75
77
```
76
78
77
-
Below is a sample response from the REST API:
79
+
Notice a sample response from the REST API:
80
+
78
81
```json
79
82
{
80
83
"totalCount": 2,
@@ -101,12 +104,15 @@ Below is a sample response from the REST API:
101
104
```
102
105
103
106
### Command Line Interface
107
+
104
108
To view the associated resources for a user-assigned managed identity, run the following command:
109
+
105
110
```azurecli
106
111
az identity list-resources --resource-group <ResourceGroupName> --name <ManagedIdentityName>
107
112
```
108
113
109
114
The response will look like this:
115
+
110
116
```json
111
117
[
112
118
{
@@ -153,6 +159,7 @@ The response will look like this:
153
159
```
154
160
155
161
### REST API using PowerShell
162
+
156
163
There's no specific PowerShell command for returning the associated resources of a managed identity, but you can use the REST API in PowerShell by using the following command:
> All resources associated with an identity will be returned, regardless of the user's permissions. The user only needs to have access to read the managed identity. This means that more resources may be visible than the user can see elsewhere in the portal. This is to provide full visibility of the identity's usage. If the user doesn't have access to an associated resource, an error will be displayed if they try to access it from the list.
164
171
165
172
## Delete a user-assigned managed identity
173
+
166
174
When you select the delete button for a user-assigned managed identity, you'll see a list of up to 10 associated resources for that identity. The full count will be displayed at the top of the pane. This list allows you to see which resources will be affected by deleting the identity. You'll be asked to confirm your decision.
167
175
168
176
:::image type="content" source="media/viewing-associated-resources/associated-resources-delete.png" alt-text="Screenshot showing the delete confirmation screen for a user-assigned managed identity.":::
169
177
170
178
This confirmation process is only available in the portal. To view an identity's resources before deleting it using the REST API, retrieve the list of resources manually in advance.
171
179
172
180
## Limitations
181
+
173
182
- This functionality is available in all public regions, and will be available in USGov and China in the coming weeks.
174
183
- API requests for associated resources are limited to one per second per tenant. If you exceed this limit, you may receive a `HTTP 429` error. This limit doesn't apply to retrieving a list of user-assigned managed identities.
175
184
- Azure Resources types that are in preview, or their support for Managed identities is in preview, may not appear in the associated resources list until fully generally available. This list includes Service Fabric clusters, Blueprints, and Machine learning services.
0 commit comments