I want to access - view, update & delete operation on Azure Redis Cache via Console or Redis CLI authenticated via managed identity

Question

I want to access - view, update & delete operation on Azure Redis Cache via Console or Redis CLI

which is authenticated via managed identity and access key-based authentication is disabled.

I tried accessing it is giving me,
Access Forbidden

Could you please help me with the same?

Answer 1

To access Azure Redis Cache with view, update, and delete operations via the Console or Redis CLI while using managed identity, ensure that you have properly configured the managed identity and granted the necessary permissions. Here are some steps to troubleshoot the "Access Forbidden" error:

1. Managed Identity Configuration: Make sure that the managed identity is correctly assigned to your Azure Cache for Redis instance. You can do this through the Azure portal or using Azure CLI commands.
2. Role Assignment: Verify that the managed identity has the appropriate role assigned. For accessing the Redis cache, the managed identity should have at least the Data Owner, Data Contributor, or Data Reader role assigned through Azure Role-Based Access Control (RBAC).
3. Access Key Authentication: Since you mentioned that access key-based authentication is disabled, ensure that your application or service is configured to authenticate using the managed identity only.
4. Using Redis CLI: When using the Redis CLI, ensure that you are using the correct command to authenticate via managed identity. The CLI should be set up to use the managed identity token for authentication.
5. Check Firewall and Network Settings: Ensure that there are no network restrictions or firewall rules that might be blocking access to the Redis instance.

If you have checked all these configurations and are still facing issues, consider reviewing the Azure documentation on managed identities and role assignments for Azure Cache for Redis for further guidance.

---

References:

• Managed identity for storage accounts
• Configure custom data access policies