Access Document Intelligence with Service Principal or Managed Identity

Question

Dear Sir or Madam,

Document Intelligence can be accessed via its keys and it is recommended to store keys into Azure Key Vault. However, can Service Princiapl or Manged Identity be used to access the endpoint of Document Intelligence?

If yes, what roles or permissions should be granted to follow the principle of least privilege?

Thanks.

Answer 1

You can store keys in key vault and provide access to managed Identity using RBAC roles.

https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-guide?tabs=azure-cli#azure-built-in-roles-for-key-vault-data-plane-opera

You can pick right role based on access requirement:

Key Vault Secrets Officer