What should be 'Resource ID' value in Azure function linked service in data factory for managed identity access?

Question

What should be 'Resource ID' value in Azure function linked service in data factory for managed identity access?

Sanal Kumar Parakkad 156

I have an azure function app with Microsoft AD authentication enabled. I have configured Azure data factory pipeline to access an anonymous function through Azure function linked service.
I want to use Managed identity authentication from data factory to Azure function. I have added data factory managed identity to a role in Azure function AD application.

What should be 'Resource ID' value while creating Azure function linked service in data factory for managed identity access?
I tried giving the value 'api://<ADApplicationID>' and resource id (/subscription/xxxx/reourcegroup/xxx/provider/xx....', but both didnt work, which keeps throwing a 401 Unauthorized error.
The same works by hitting the azure function URL with Web activity in ADF pipeline with managed identity authentication without any issues.

1 answer

Your answer

Answer 1

HimanshuSinha 19,547 Microsoft Employee Moderator

Hello @Sanal Kumar Parakkad ,
Thanks for the ask and using the Microsoft Q&A platform .
When you create a Azure function , the deployment process creates a app id . You can see the same

Now navigate to the AAD search with the app name .

Please use the application ID In the resource id and it should work . I just tested that on my side .

Please do let me know how it goes .
Thanks
Himanshu
Please do consider clicking on "Accept Answer" and "Up-vote" on the post that helps you, as it can be beneficial to other community members

Sanal Kumar Parakkad 156 Reputation points

2021-09-01T08:15:56.667+00:00
Hi @HimanshuSinha I tried using the Application ID in the Resource ID field, but it throws 401 error with message 'You do not have permission to view this directory or page'
Couple of things:

I have the 'User assignment required' set to yes for the Enterprise application of the function app.

I have added the ADF managed identity to the Enterprise app using New-AzureADServiceAppRoleAssignment powershell cmdlet.

But still facing the above issue.
HimanshuSinha 19,547 Reputation points Microsoft Employee Moderator

2021-09-08T16:50:03.067+00:00

Hello @Sanal Kumar Parakkad ,
Are still facing the issue , actually i was also facing the error , but once I resolved the permission , I was able to make it work . Please do let me know how it goes .
Thanks
Himanshu
Sanal Kumar Parakkad 156 Reputation points

2021-09-09T08:01:24.82+00:00

Yes @HimanshuSinha-msft Still facing the same issue. When you say resolve permission, did you add the adf managed identity to an app role?
Santosh Mallena 1 Reputation point

2022-03-25T04:56:26.927+00:00

Yes, You have to provide function app enterprise app ID (application ID), in the filed of resource ID in the ADF linked service for function app. it worked for me.
Kiran Chauhan 0 Reputation points

2024-02-14T15:29:49.8133333+00:00

Its help full.

Share via

What should be 'Resource ID' value in Azure function linked service in data factory for managed identity access?

1 answer

Your answer