This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 86%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EY%3C/text%3E%3C/svg%3E)
I'm trying to enable Managed Identity on my AKS, to do that I run the command below;
az aks update -g myRg -n myAKS --enable-managed-identity
And it successfully finished. So after this point I don't see any new Managed Identity in "Managed Identity" resource list. Or no new entry in AKS' IAM.
How can I find that which Managed Identity I enabled for my AKS cluster?
Hi Yatta,
Have you upgraded the node-image for your node pool as described here?
Hello! I couldn't find anything in that page except this command "az aks nodepool upgrade --node-image-only" and it gives error. It's not clear how to run this command.
I tried below and still same;
az aks nodepool upgrade --node-image-only --cluster-name myAKS
Not sure how this command runs?
Hi Yatta,
You can run the command on all node pools:
az aks upgrade --resource-group myResourceGroup --name myAKSCluster --node-image-only
Or on specific node pool:
az aks nodepool upgrade --resource-group myResourceGroup --cluster-name myAKSCluster --name mynodepool --node-image-only
Reference: https://learn.microsoft.com/en-us/azure/aks/node-image-upgrade
Hello Mutaz,
Now I run the command it's executed without error. But now how can I know that if Managed Identity is enabled on my cluster? Or which Managed Idedtity has been using?
Thanks.
Hi @yatta
Thanks for reaching Microsoft Q&A
Continuing the questions, by default MI is enabled. If you go to your MC_ resource group you are going to see something like this below (pic1).
Also if you want to go much deeper, jump inside of the node in the path. (pic 2).
Hope this helps. Please "Accept as Answer" if it helped, so that it can help others in the community looking for help on similar topics.
Pic 1
Pic 2
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 98%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKM%3C/text%3E%3C/svg%3E)
@yatta Checking in to see if the answer below or the comments above helped.
If you have any questions at all, please let me know in the "comments" and I would be happy to help you. Comment is the fastest way of notifying the experts.
Please don’t forget to Accept Answer and hit Yes for "was this answer helpful" wherever the information provided helps you. This can be beneficial to other community members for remediation for similar issues.
Hi yatta,
Once you enabled the managed identity on your AKS cluster, then you have to upgrade the node-image for your node pool, use this command to upgrade all node pools:
az aks upgrade --resource-group myResourceGroup --name myAKSCluster --node-image-only
Or this command to upgrade a specific node pool:
az aks nodepool upgrade --resource-group myResourceGroup --cluster-name myAKSCluster --name mynodepool --node-image-only
After that you can verify your AKS cluster if it is managed identity enabled using the following command:
az aks show --resource-group myResourceGroup --name myAKSCluster -o json --query servicePrincipalProfile
And this command will show the managed identity resource ID:
az aks show --resource-group myResourceGroup --name myAKSCluster -o json --query identityProfile
Please "Accept as Answer" if it helped, so that it can help others in the community looking for help on similar topics.