is username and password is the only way to submit job to HDInsight cluster? is managed identity or msi or service principal supported? Added question: can HDI team build API which uses AAD tokens as password instead of user input password? we have threat model review for this and we wanted to go away from storing this user input "password" secret in the KV.

Hello @Bill Kan , Welcome to the Microsoft Q&A platform. Unfortunately, HDInsight compute linked service doesn't support MSI or Service principle. Note: Currently the HDInsight cluster is only supported by a service account, although HDInsight does support create/delete of the cluster using a managed Identity. Appreciate if you could share the feedback on our ADF feedback channel . Which would be open for the user community to upvote & comment on. This allows our product teams to effectively prioritize your request against our existing feature backlog and gives insight into the potential impact of implementing the suggested feature. Hope this will help. Please let us know if any further queries. ------------------------------ Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how Want a reminder to come back and check responses? Here is how to subscribe to a notification If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators

run job in HDInsight compute linked service

Accepted answer

PRADEEPCHEEKATLA 90,231 Reputation points

2022-03-07T08:33:15.573+00:00
Hello @Bill Kan ,

Welcome to the Microsoft Q&A platform.

Unfortunately, HDInsight compute linked service doesn't support MSI or Service principle.

Note: Currently the HDInsight cluster is only supported by a service account, although HDInsight does support create/delete of the cluster using a managed Identity.

Appreciate if you could share the feedback on our ADF feedback channel. Which would be open for the user community to upvote & comment on. This allows our product teams to effectively prioritize your request against our existing feature backlog and gives insight into the potential impact of implementing the suggested feature.

Hope this will help. Please let us know if any further queries.

------------------------------

Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how

Want a reminder to come back and check responses? Here is how to subscribe to a notification

If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators
Please sign in to rate this answer.

1 person found this answer helpful.
PRADEEPCHEEKATLA 90,231 Reputation points

2022-03-09T10:05:05.517+00:00

Hello @Bill Kan ,

Just checking in to see if the above answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Bill Kan 21 Reputation points

2022-03-09T23:08:26.847+00:00

can HDI team build API which uses AAD tokens as password instead of user input password? we have threat model review for this and we wanted to go away from storing this user input "password" secret in the KV.

PRADEEPCHEEKATLA 90,231 Reputation points

2022-03-10T03:26:45.783+00:00

Hello @Bill Kan ,

Appreciate if you could share the feedback on our ADF feedback channel. Which would be open for the user community to upvote & comment on. This allows our product teams to effectively prioritize your request against our existing feature backlog and gives insight into the potential impact of implementing the suggested feature.

Bill Kan 21 Reputation points

2022-03-10T04:24:01.53+00:00

can HDI team build API which uses AAD tokens as password instead of user input password? we have threat model review for this and we wanted to go away from storing this user input "password" secret in the KV.

PRADEEPCHEEKATLA 90,231 Reputation points

2022-03-10T06:10:49.543+00:00

Hello @Bill Kan ,

As said on the above post, you need to create a new feature request as per your requirement.

For any new feature request that should go through the Azure feedback channel. This allows our product teams to effectively prioritize your request against our existing feature backlog and gives insight into the potential impact of implementing the suggested feature.

Bill Kan 21 Reputation points

2022-03-10T06:39:05.517+00:00

Okay I created couple ideas there. How often they look at the idea and triage?

PRADEEPCHEEKATLA 90,231 Reputation points

2022-03-11T03:03:01.097+00:00

Hello @Bill Kan ,

Product team reviews these feedback provided on the regular basis and prioritize the feedback into the feature item.

Hope this will help. Please let us know if any further queries.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

run job in HDInsight compute linked service

0 additional answers

Your answer