Azure Kubernetes Service
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
How to look up AKS managed AAD user ID
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(160, 0%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
akhan
206
Reputation points
We are switching our current project from legacy to using AKS Managed AAD in terraform. Our code uses the legacy AKS service principal ID/Secret to setup some config. I am now wondering since we dont have to create a SP and it is managed as part of AKS AAD. Is it possible for me to look up the AKS-Managed AAD user ID ?
Thanks
Azure Kubernetes Service
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Microsoft Entra ID
A cloud-based identity and access management service for securing user authentication and resource access
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 15%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
singhh-msft 2,431 Reputation points2021-03-16T06:03:55.747+00:00 @akhan , thank you for reaching out to us. Happy to help. I suppose that you are asking about fetching
Principal ID, if not please let me know otherwise. Use the following command to queryobjectidof your control plane managed identity:az aks show -g myResourceGroup -n myManagedCluster --query "identity"The result should look like:
{ "principalId": "<object_id>", "tenantId": "<tenant_id>", "type": "SystemAssigned" }Finally, get credentials to access the cluster:
az aks get-credentials --resource-group myResourceGroup --name myManagedClusterI recommend you to check out Create an AKS cluster with managed identities for more information.
Let me know if this answers your question.
-
singhh-msft 2,431 Reputation points
2021-03-16T06:13:25.913+00:00 @akhan , also, do check out AKS-managed Azure Active Directory integration.
Let me know if these answer your query.
-
singhh-msft 2,431 Reputation points
2021-03-17T07:03:00.943+00:00 @akhan , just checking in to see of you got a chance to look at my comments.
-
singhh-msft 2,431 Reputation points
2021-03-18T05:43:22.533+00:00 @akhan , just checking in to see of you got a chance to look at my comments.
Sign in to comment
Sign in to answer