This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 5%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETM%3C/text%3E%3C/svg%3E)
Hi
Are there any specific Azure AD roles / privileges required when creating an Azure Resource with a System Assigned Managed Identity? For example, when deploying an API Management instance using Azure DevOps (Service Connection) - if the APIM is being created with a System Assigned Managed Identity.
Thanks
Taranjeet Singh
Hi,
You do not need any special permissions to create resource with system assigned managed identity besides the permissions to create the resource. For example to create API Management instance you will need API Management Service Contributor or higher role.
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Thanks for the response @Stanislav Zhelyazkov . Is it correct to say that the resource in this case goes and registers its own identity in the Entra ID and by default becomes the owner of that account?
Thanks
Taranjeet Singh
Yes there is enterprise application created in Microsoft Entra corresponding to the identity but it does not have owner property populated.
