Edit

Enabling managed identity for Event Grid namespace

  • Article

In this article, you learn how to assign a system-assigned or a user-assigned identity to an Event Grid namespace. To learn about managed identities in general, see What are managed identities for Azure resources.

Note

  • You can assign one system-assigned identity and up to two user-assigned identities to a namespace.

Enable managed identity for an existing namespace

This section shows you how to enable a managed identity for an existing system topic.

  1. Go to the Azure portal.
  2. Search for event grid namespace in the search bar at the top.
  3. Select the Event Grid namespace for which you want to enable the managed identity.
  4. Select Identity under Settings on the left menu.

Enable system-assigned identity

  1. Turn on the switch to enable the identity.

  2. Select Save on the toolbar to save the setting.

    System-assigned identity page for an Event Grid namespace.

  3. Select Yes on the confirmation message.

  4. Confirm that you see the object ID of the system-assigned managed identity and see a link to assign roles.

    Assigning identity to a namespace is completed.

Enable user-assigned identity

  1. First, create a user-assigned identity by following instructions in the Manage user-assigned managed identities article.

  2. On the Identity page, switch to the User assigned tab in the right pane, and then select + Add on the toolbar.

    Image showing the Add button selected in the User assigned tab of the Identity page.

  3. In the Add user managed identity window, follow these steps:

    1. Select the Azure subscription that has the user-assigned identity.
    2. Select the user-assigned identity.
    3. Select Add.

  4. Refresh the list in the User assigned tab to see the added user-assigned identity.

Enable managed identity when creating an Event Grid namespace

  1. In the Azure portal, in the search bar, search for and select Event Grid namespace.
  2. On the Event Grid Namespaces page, select Create on the toolbar.
  3. On the Basics page of the creation wizard, follow these steps:

    1. Select values for subscription, resource group, location as per your preference.

    2. Specify a name for the namespace.

    3. In the security tab, you can enable managed identity:

      1. To enable system-assigned identity, select Enable system assigned identity.
      2. To enable user assigned identity:
        1. Select User assigned identity, and then select Add user identity.
        2. In the Add user managed identity window, follow these steps:
          1. Select the Azure subscription that has the user-assigned identity.
          2. Select the user-assigned identity.
          3. Select Add.

      Image showing the screenshot of namespace creation wizard with system assigned identity and user assigned identity options selected.

Next steps

See Publish and subscribe to MQTT message using Event Grid