Missing documentation on accessing multiple storage accounts with managed identity
- Dominant language
- PowerShell
- Stars
- 1.1k
- Forks
- 215
- Avg merge
- 4h 2m
- Merged PRs (30d)
- 1
Description
It is very difficult (impossible for me) to figure out if multiple storage accounts can be accessed from an azure function using managed identity.
Despite following the documentation I have been able to find, I still get a 403 when trying to access the storage account from an azure function with the documented setup for RBAC. As [per the docs](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-based-connections-tutorial#use-managed-identity-for-azurewebjobsstorage) the IAM on storage accounts are set to Blob Storage Owner / Reader for the function.
Public network access is enabled from all networks to the storage account to exclude this as an issue.
I have not been able to find a tutorial or documentation of granting access to multiple storage accounts. The only hands on guide I could find is [limited to the default function storage account](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-based-connections-tutorial#use-managed-identity-for-azurewebjobsstorage) requiring an explicit postfix on the default storage naming convention. (I did a brute force experiment with the same postfix naming convention on the other storage accounts with no luck)
- If granting access to multiple storage accounts with managed identity is not possible this should be documented.
- If it is possible to grant access to multiple storage accounts with managed identity a functional guide is required, as the current documentation seems inadequate.
I have raised a question on [SO](https://stackoverflow.com/questions/77082120/how-do-i-give-an-azure-function-access-to-multiple-blob-storage-accounts-wit) with more details.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.