Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
One of the benefits of using trusted storage is that it disables public access to your storage account. Another benefit of using trusted storage is the ability to grant access to trusted Azure services.
When you create a Video Indexer account, you must associate it with an Azure Storage account. Storage accounts for VI must be a Standard general-purpose v2 storage account. Video Indexer accesses the storage account using user-assigned or system-assigned managed identity authentication. Video Indexer validates that the user adding the association has access to the storage account with Azure Resource Manager Role Based Access Control (RBAC).
To secure your storage account, you can use trusted storage access through your firewall configuration. It enables only trusted Azure platform services to access the storage account. With it, Managed Identities allow Video Indexer to access the storage account.
Use the following information to enable managed identity for Azure Storage and then lock your storage account. It assumes that you already created a Video Indexer account and associated the storage account.
Assign the managed identity and role
Follow all of the steps for creating an Azure AI Video Indexer account, but also use the following steps:
- When you select Assign Role, the
Azure Storage : Storage Blob Data Ownerrole is assigned. You can verify or manually set assignments by navigating to the Identity menu of your Video Indexer account and selecting Azure Role Assignments. - Navigate to your Storage account. Select Networking from the menu and select Enabled from selected virtual networks and IP addresses in the Public network access section.
- Under Exceptions, make sure that Allow Azure services on the trusted services list to access this storage account is selected.