pac managed-identity

Commands for managing Managed Identity records for Dataverse components

Commands

Command	Description
pac managed-identity configure-fic	(Preview) Create the federated identity credential on the managed identity or app registration
pac managed-identity create	(Preview) Create and link a managed identity to a Dataverse component
pac managed-identity delete	(Preview) Remove the managed identity linked to a Dataverse component
pac managed-identity get	(Preview) Show the managed identity linked to a Dataverse component
pac managed-identity show-fic	(Preview) Show the computed federated identity credential for a Dataverse component
pac managed-identity update	(Preview) Update tenant or application identifiers for the linked managed identity
pac managed-identity upgrade-version	(Preview) Upgrade managed identity to the latest supported version for the component type
pac managed-identity verify-fic	(Preview) Verify whether the federated identity credential exists

pac managed-identity configure-fic

(Preview) Create the federated identity credential on the managed identity or app registration

Required Parameters for managed-identity configure-fic

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

Optional Parameters for managed-identity configure-fic

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

pac managed-identity create

(Preview) Create and link a managed identity to a Dataverse component

Required Parameters for managed-identity create

--application-id -aid

Application (client) ID of the managed identity or app registration

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

--tenant-id -tid

Azure AD tenant ID for the managed identity or application registration

Optional Parameters for managed-identity create

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

pac managed-identity delete

(Preview) Remove the managed identity linked to a Dataverse component

Required Parameters for managed-identity delete

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

Optional Parameters for managed-identity delete

--confirm -y

Confirms the delete operation without prompting

This parameter requires no value. It's a switch.

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

pac managed-identity get

(Preview) Show the managed identity linked to a Dataverse component

Required Parameters for managed-identity get

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

Optional Parameters for managed-identity get

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

pac managed-identity show-fic

(Preview) Show the computed federated identity credential for a Dataverse component

Required Parameters for managed-identity show-fic

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

Optional Parameters for managed-identity show-fic

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

pac managed-identity update

(Preview) Update tenant or application identifiers for the linked managed identity

Required Parameters for managed-identity update

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

Optional Parameters for managed-identity update

--application-id -aid

Application (client) ID of the managed identity or app registration

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

--tenant-id -tid

Azure AD tenant ID for the managed identity or application registration

pac managed-identity upgrade-version

(Preview) Upgrade managed identity to the latest supported version for the component type

Required Parameters for managed-identity upgrade-version

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

Optional Parameters for managed-identity upgrade-version

--confirm -y

Confirms the upgrade-version operation when updating or reverting the managed identity version

This parameter requires no value. It's a switch.

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

--revert-version

Revert the managed identity to the previous version instead of upgrading

This parameter requires no value. It's a switch.

--skip-fic-configuration

Skip automatic federated identity credential configuration. When set, shows FIC values for manual Azure Portal configuration and requires user confirmation before version upgrade.

This parameter requires no value. It's a switch.

pac managed-identity verify-fic

(Preview) Verify whether the federated identity credential exists

Required Parameters for managed-identity verify-fic

--component-id -id

Dataverse record ID (GUID) for the component

--component-type -t

Component type (for example, ServiceEndpoint, PluginAssembly, CopilotStudio)

Optional Parameters for managed-identity verify-fic

--environment -env

Specifies the target Dataverse. The value may be a Guid or absolute https URL. When not specified, the active organization selected for the current auth profile will be used.

See also

Microsoft Power Platform CLI Command Groups
Microsoft Power Platform CLI overview