Share via


az acr config authentication-as-arm

This command group is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Manage 'Azure AD authenticate as ARM' policy for Azure Container Registries.

Commands

Name Description Type Status
az acr config authentication-as-arm show

Show the configured 'Azure AD authenticate as ARM' policy for an Azure Container Registry.

Core Preview
az acr config authentication-as-arm update

Update 'Azure AD authenticate as ARM' policy for an Azure Container Registry.

Core Preview

az acr config authentication-as-arm show

Preview

Command group 'acr config authentication-as-arm' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Show the configured 'Azure AD authenticate as ARM' policy for an Azure Container Registry.

az acr config authentication-as-arm show --registry
                                         [--resource-group]

Examples

Show the configured 'Azure AD authenticate as ARM' policy for an Azure Container Registry

az acr config authentication-as-arm show -r myregistry

Required Parameters

--registry -r

The name of the container registry. It should be specified in lower case. You can configure the default registry name using az configure --defaults acr=<registry name>.

Optional Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az acr config authentication-as-arm update

Preview

Command group 'acr config authentication-as-arm' is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Update 'Azure AD authenticate as ARM' policy for an Azure Container Registry.

az acr config authentication-as-arm update --registry
                                           [--resource-group]
                                           [--status {disabled, enabled}]

Examples

Disable 'Azure AD authenticate as ARM' policy for an Azure Container Registry, so only ACR audienced tokens can be used for authentication

az acr config authentication-as-arm update -r myregistry --status Disabled

Enable 'Azure AD authenticate as ARM' policy for an Azure Container Registry, it will allow both ACR and ARM audienced tokens to be used for authentication

az acr config authentication-as-arm update -r myregistry --status Enabled

Required Parameters

--registry -r

The name of the container registry. It should be specified in lower case. You can configure the default registry name using az configure --defaults acr=<registry name>.

Optional Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--status

Indicate whether authentication-as-arm is enabled.

Accepted values: disabled, enabled
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.