Services that support managed identities for Azure resources

Managed identities for Azure resources provide Azure services with an automatically managed identity in Azure Active Directory. Using a managed identity, you can authenticate to any service that supports Azure AD authentication without having credentials in your code. We are in the process of integrating managed identities for Azure resources and Azure AD authentication across Azure. Check back often for updates.

Note

Managed identities for Azure resources is the new name for the service formerly known as Managed Service Identity (MSI).

Azure services that support managed identities for Azure resources

The following Azure services support managed identities for Azure resources:

Azure Virtual Machines

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Preview Preview Preview
User assigned Available Preview Preview Preview

Refer to the following list to configure managed identity for Azure Virtual Machines (in regions where available):

Azure Virtual Machine Scale Sets

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Preview Preview Preview
User assigned Available Preview Preview Preview

Refer to the following list to configure managed identity for Azure Virtual Machine Scale Sets (in regions where available):

Azure App Service

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Available Available Available
User assigned Available Not available Not available Not available

Refer to the following list to configure managed identity for Azure App Service (in regions where available):

Azure Blueprints

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Available Not available Not available
User assigned Available Available Not available Not available

Refer to the following list to use a managed identity with Azure Blueprints:

Azure Functions

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Available Available Available
User assigned Available Not available Not available Not available

Refer to the following list to configure managed identity for Azure Functions (in regions where available):

Azure Logic Apps

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Preview Preview Not available Preview
User assigned Not available Not available Not available Not available

Refer to the following list to configure managed identity for Azure Logic Apps (in regions where available):

Azure Data Factory V2

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Not available Not available Not available
User assigned Not available Not available Not available Not available

Refer to the following list to configure managed identity for Azure Data Factory V2 (in regions where available):

Azure API Management

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Available Not available Not available
User assigned Not available Not available Not available Not available

Refer to the following list to configure managed identity for Azure API Management (in regions where available):

Azure Container Instances

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Linux: Preview
Windows: Not available
Not available Not available Not available
User assigned Linux: Preview
Windows: Not available
Not available Not available Not available

Refer to the following list to configure managed identity for Azure Container Instances (in regions where available):

Azure Container Registry Tasks

Managed identity type All Generally Available
Global Azure Regions
Azure Government Azure Germany Azure China 21Vianet
System assigned Available Not available Not available Not available
User assigned Preview Not available Not available Not available

Refer to the following list to configure managed identity for Azure Container Registry Tasks (in regions where available):

Azure services that support Azure AD authentication

The following services support Azure AD authentication, and have been tested with client services that use managed identities for Azure resources.

Azure Resource Manager

Refer to the following list to configure access to Azure Resource Manager:

Cloud Resource ID Status
Azure Global https://management.azure.com/ Available
Azure Government https://management.usgovcloudapi.net/ Available
Azure Germany https://management.microsoftazure.de/ Available
Azure China 21Vianet https://management.chinacloudapi.cn Available

Azure Key Vault

Cloud Resource ID Status
Azure Global https://vault.azure.net Available
Azure Government https://vault.usgovcloudapi.net Available
Azure Germany https://vault.microsoftazure.de Available
Azure China 21Vianet https://vault.azure.cn Available

Azure Data Lake

Cloud Resource ID Status
Azure Global https://datalake.azure.net/ Available
Azure Government Not Available
Azure Germany Not Available
Azure China 21Vianet Not Available

Azure SQL

Cloud Resource ID Status
Azure Global https://database.windows.net/ Available
Azure Government https://database.usgovcloudapi.net/ Available
Azure Germany https://database.cloudapi.de/ Available
Azure China 21Vianet https://database.chinacloudapi.cn/ Available

Azure Event Hubs

Cloud Resource ID Status
Azure Global https://eventhubs.azure.net Available
Azure Government Not Available
Azure Germany Not Available
Azure China 21Vianet Not Available

Azure Service Bus

Cloud Resource ID Status
Azure Global https://servicebus.azure.net Available
Azure Government Available
Azure Germany Not Available
Azure China 21Vianet Not Available

Azure Storage blobs and queues

Cloud Resource ID Status
Azure Global https://storage.azure.com/

https://<account>.blob.core.windows.net

https://<account>.queue.core.windows.net
Available
Azure Government https://storage.azure.com/

https://<account>.blob.core.usgovcloudapi.net

https://<account>.queue.core.usgovcloudapi.net
Available
Azure Germany https://storage.azure.com/

https://<account>.blob.core.cloudapi.de

https://<account>.queue.core.cloudapi.de
Available
Azure China 21Vianet https://storage.azure.com/

https://<account>.blob.core.chinacloudapi.cn

https://<account>.queue.core.chinacloudapi.cn
Available

Azure Analysis Services

Cloud Resource ID Status
Azure Global https://*.asazure.windows.net Available
Azure Government https://*.asazure.usgovcloudapi.net Available
Azure Germany https://*.asazure.cloudapi.de Available
Azure China 21Vianet https://*.asazure.chinacloudapi.cn Available