Using Managed Identity in Azure Function (Powershell) debug locally

Question

Hello,

I need to connect to Blob Storage in Powershell Azure Function using Managed Identity.

1. What role needs to be assigned to System assigned managed Identity ?
   2. Once the right role has been assigned, can I use
      Connect-AzAccount -Identity
      in local environment or are there other configurations that need to be done?

Answer 1

@Luuk van Vliet , Thanks for reaching out.

1. What role needs to be assigned to System assigned managed Identity?
   You can assign Storage Account Contributor role to that Managed Identity if you want to perform any kind of operations (like read, write, delete on container or blobs) in that storage account. Here is the document to more about the different built-in RBAC roles related to the storage account.
2. Once the right role has been assigned, can I use Connect-AzAccount -Identity in local environment or are there other configurations that need to be done
   Yes, you can use the Connect-AzAccount -identity to connect to the Azure account in local environment or from the portal as well.

Feel free to get back to me if you have any query or concern.