1. Nerdio Manager for Enterprise
  2. Setup and Settings
  3. Azure and Active Directory Environment

Link Azure Subscription Using Managed Identities

Avatar
Nerdio Support

Link Azure Subscription Using Managed Identities

Starting with v6.6, Nerdio Manager allows you to link Azure subscriptions using Managed Identities in addition to App Registrations.

Note: You must assign the necessary permissions to Managed Identity (MI). These are the same requirements when you link your subscription using App Registration. See Link Azure Subscription Using App Credentials for permission details.

Create a User Assigned Managed Identity

If you have an existing Manage Identity, it can be used. However, it is recommended that you use a Managed Identity dedicated to Nerdio Manager to prevent over permissioning.

To create a user assigned Managed Identity:

  1. In the Azure portal, navigate to Managed Identities.

  2. Select + Create.

  3. Enter the following information:

    • Subscription: From the drop-down list, select the subscription.

      • Resource group: From the drop-down list, select the resource group. Alternatively, select Create new to create a new resource group.

    • Region: From the drop-down list, select the Azure region.

      Note: Managed Identities may be used from any Azure region and its availability is dependent on the availability of Microsoft Entra ID.

    • Name: Type the name of your user assigned Managed Identity.

  4. Once you have entered all the desired information, select Review + create.

  5. Review your settings and then select Create.

Assign the Managed Identity to the App Service

You must assign a Managed Identity to the Nerdio Manager app service.

Note: If you have DR configured, be sure to assign the Managed Identity to all the app services.

To assign Managed Identity to the app service:

  1. In the Azure portal, navigate to App Services.

  2. Select the Nerdio Manager app service, which starts with nmw-app-.

  3. In the Settings blade, select Identity.

  4. Select the User assigned tab.

  5. Select + Add to assign the existing Managed Identity to the app service.

  6. Search for and select the Managed Identity to use and then select Add.

Link the Azure Subscription using Managed Identity

Once the Managed Identity is link to the Nerdio Manager app service, you can link the Azure subscription using Managed Identity.

To link the Azure subscription using Managed Identity:

  1. In Nerdio Manager, navigate to Settings > Azure environment.

  2. In the Azure subscriptions tile, select Link using app credentials.

  3. Enter the following information:

    • Tenant ID: Provide the Entra ID tenant/directory ID.

    • Subscription ID: Provide the Azure subscription ID of the subscription being linked.

    • Select app identity: From the drop-down list, select the client app registration.

    • Identity Type: From the drop-down list, select Managed identity.

    • App ID: Provide the client app ID of the service principal with access to the subscription being linked.

  4. Once you have entered the desired information, select OK.

Was this article helpful?

0 out of 0 found this helpful
Have more questions? Submit a request

Related articles

Comments (0 comments)

Article is closed for comments.