Skip to main content

system_assigned_identities

Creates, updates, deletes, gets or lists a system_assigned_identities resource.

Overview

Namesystem_assigned_identities
TypeResource
Idazure.msi.system_assigned_identities

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstringFully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
namestringThe name of the resource.
clientIdstringThe id of the app associated with the identity. This is a random generated UUID by MSI.
clientSecretUrlstringThe ManagedServiceIdentity DataPlane URL that can be queried to obtain the identity credentials.
locationstringRequired.
principalIdstringThe id of the service principal object associated with the created identity.
systemDataobjectAzure Resource Manager metadata containing createdBy and modifiedBy information.
tagsobject:vartype tags: dict[str, str]
tenantIdstringThe id of the tenant which the identity belongs to.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_by_scopeselectscopeGets the systemAssignedIdentity available under the specified RP scope.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
scopestringThe fully qualified Azure Resource manager identifier of the resource. Required.

SELECT examples

Gets the systemAssignedIdentity available under the specified RP scope.

SELECT
id,
name,
clientId,
clientSecretUrl,
location,
principalId,
systemData,
tags,
tenantId,
type
FROM azure.msi.system_assigned_identities
WHERE scope = '{{ scope }}' -- required
;