Skip to content

Files

Latest commit

RoseHJMRoseHJM
devtest-labs Updated author metadata
Mar 18, 2022
93f0cdd · Mar 18, 2022

History

History
60 lines (45 loc) · 3.01 KB

enable-managed-identities-lab-vms.md

File metadata and controls

60 lines (45 loc) · 3.01 KB
title description ms.topic ms.author author ms.date
Enable managed identities on your lab VMs
This article shows how a lab owner can enable user-assigned managed identities on your lab virtual machines.
how-to
rosemalcolm
RoseHJM
06/26/2020

Enable user-assigned managed identities on lab virtual machines in Azure DevTest Labs

As a lab owner, you can enable user-assigned managed identities on your lab virtual machines (VMs) in Azure DevTest Labs.

A managed identity can be used to authenticate to any service that supports Azure Active Directory (AD) authentication, including Key Vault, without passing any credentials in the code. For more information on managed identities, see What is managed identities for Azure resources?.

With this feature, lab users can share Azure resources such as Azure SQL Database in the context of the lab. The authentication to the resource is taken care by the identity itself. Once configured, every existing/newly created lab VM will be enabled with this identity. Lab users can access resources once logged in to their machines.

Note

You can add multiple user assigned managed identities to be enabled on your lab VMs.

Use Azure portal

To add a user assigned managed identity for lab VMs, follow these steps:

  1. Create a user-assigned managed identity in your subscription

  2. Navigate to the Configuration and policies page for your lab.

  3. Select Identity (Preview) on the left menu.

  4. Select the Virtual machine tab.

  5. Select Add to select an existing identity from a pre-populated dropdown list.

    [!div class="mx-imgBorder"] Add identity button

  6. Select an existing user-managed identity from the dropped-down list, and select OK.

    [!div class="mx-imgBorder"] Add identity

Use API

  1. After creating an identity, note the resource ID of the identity. It should look like the following sample:

    /subscriptions/0000000000-0000-0000-0000-00000000000000/resourceGroups/{rg}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}.

  2. Perform a PUT HTTPS method on the lab resource to add one or multiple user assigned identities to the managementIdentities field.

    {
    "location": "southeastasia",
    "properties": {
    ...
        "managementIdentities": {
           "/subscriptions/0000000000-0000-0000-0000-00000000000000/resourceGroups/{rg}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}": {}
    },
    ...
    },
...
}

Next steps

To learn more about managed identities, see What is managed identities for Azure resources?.