Advanced Clusters

Back Next

Create a storage role on Microsoft Azure

If the self-service cluster is on Microsoft Azure, create a managed identity with a storage role that can access the staging and log locations and associate it with the Secure Agent machine.

For detailed instructions about creating a managed identity, refer to the Microsoft Azure documentation.

In Azure, create a managed identity named storage_identity.

You can use an existing system-assigned managed identity or you can create a user-assigned managed identity. If you create a user-assigned managed identity, disable the system-assigned managed identity.

Create a custom role named storage_role with the following role definition:

{
   "properties":{
      "roleName":"storage_role",
      "description":"",
      "assignableScopes":[
         "/subscriptions/<subscription ID>/resourceGroups/<storage resource group>"
      ],
      "permissions":[
         {
            "actions":[
               "Microsoft.Storage/storageAccounts/read",
               "Microsoft.Storage/storageAccounts/write",
               "Microsoft.Storage/storageAccounts/listKeys/action"
            ],
            "notActions":[
               
            ],
            "dataActions":[
               
            ],
            "notDataActions":[
               
            ]
         }
      ]
   }
}

Assign the custom role storage_role to the managed identity named storage_identity.

Rename Saved Search

Table of Contents

Advanced Clusters

Advanced Clusters

Create a storage role on Microsoft Azure

Create a storage role on Microsoft Azure