Install Azure CLI beta version
A new beta version of the Azure CLI has been released that offers increased security for token cache, access tokens and SSL certificates. This beta vesion can be installed in Windows, macOS and Linux environments and will stay in sync with the most recent release.
BREAKING CHANGES are introduced in this release. Carefully read all release notes prior to installation.
The beta version does not guarantee product level quality so it should not be used in your production environment.
Understand beta changes
The current Azure CLI saves the ADAL refresh tokens and access tokens to
~/.azure/accessToken.json. Azure CLI beta uses MSAL and will no longer generate
accessTokens.json. Tokens will be saved to MSAL's shared token cache called
The MSAL token cache will be encrypted on Windows, macOS and Linux with a desktop environment; therefore, directly accessing the MSAL token cache will not work. Any existing workflow depending on
accessTokens.json will stop working.
Below are several alternatives you may consider:
az account get-access-token
You can manually call
az account get-access-token in a terminal or use subprocess to call it from another programming language. By default, the returned token is for the default subscription/tenant shown in
az account show.
AzureCliCredential is a credential type in all existing language SDKs. It internally uses subprocess to call
az account get-access-token to gets an access token from current logged in CLI accounts.
Accessing shared MSAL cache
First party apps can use
SharedTokenCacheCredential from Azure Identity SDK to directly access the shared MSAL cache.
Install Azure CLI beta
Azure CLI beta can only be installed with
pip from a Microsoft repository. Use Azure Cloud Shell to execute the following commands, or
python3, depending on the Linux distribution or your installed Python version.
To avoid overwriting your installed Azure CLI, we recommend installing the beta version in a virtual environment.
Create a virtual environment
Navigate to the folder where you want to create the virtual environment, then run:
python -m venv <env_name>
Activate the virtual environment
These commands can also be used to reactivate your virtual environment.
Install Azure CLI beta
python -m pip install --upgrade pip pip install --extra-index-url https://azcliprod.blob.core.windows.net/beta/simple/ azure-cli
Deactivate the virtual environment
After you finish using Azure CLI beta, you can close the terminal window, or use the
Uninstall Azure CLI beta
To uninstall Azure CLI beta, delete the virtual environment folder.