What are the pros and cons of using the same azure User assigned identity for multiple applications than using individual user assigned identities

Question

We have to read secrets from the key vault and we want to access them using user assigned identities. Could you please share the best approach for implementing this in multiple applications in terms of having one user assigned identity vs multiple user assigned identities

Answer 1

Hi, The answer is basically the same for every resource excluding shared resources like log analytics workspace, virtual networks, etc. You should create your resources per environment per application. Example two applications are using the same identity. One of the applications is deprecated and thus its resources are deleted. With that the identity is deleted as well. A change such as deprecation of one application affects another application and it should not.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.