Update permissions guidance for managed identities#10311
Update permissions guidance for managed identities#10311shailesh2388 wants to merge 2 commits intoMicrosoftDocs:livefrom
Conversation
The description is to make clear statement to end users that System Assigned Managed identities required graph permissions even if they are added to the group.. The current statement is confusing, hence the same was confirmed with MIcrosoft Support and propsing this statement.
|
Learn Build status updates of commit 701f1cf: ✅ Validation status: passed
For more details, please refer to the build report. |
|
@shailesh2388 : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
There was a problem hiding this comment.
Pull request overview
Clarifies Microsoft Entra permissions requirements for system-assigned managed identities used by SQL Server enabled by Azure Arc, aiming to reduce user confusion in the permissions setup section.
Changes:
- Adds a NOTE stating that Graph application permissions must be assigned directly to the system-assigned managed identity even if it’s added to a group.
docs/sql-server/azure-arc/microsoft-entra-authentication-with-managed-identity.md
Outdated
Show resolved
Hide resolved
docs/sql-server/azure-arc/microsoft-entra-authentication-with-managed-identity.md
Outdated
Show resolved
Hide resolved
…managed-identity.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
Learn Build status updates of commit bef9c41: ✅ Validation status: passed
For more details, please refer to the build report. |
|
@PratimDasgupta @MikeRayMSFT @MashaMSFT @VanMSFT @rwestMSFT Could you please review and update accordingly.. |
|
Hi @shailesh2388 , thanks for your submission! We're going to research this a bit further before merging this PR. Thanks for your patience! Masha from the SQL Docs team |
The description is to make clear statement to end users that System Assigned Managed identities required graph permissions even if they are added to the group.. The current statement is confusing, hence the same was confirmed with MIcrosoft Support and propsing this statement.