Azure / Azure/Azure-Functions

Missing documentation on accessing multiple storage accounts with managed identity

Open
#2,406 2 comments 0 reactions 1 assignee Claimed by @bhagyshricompany View on GitHub
area: documentation
Dominant language
PowerShell
Stars
1.1k
Forks
215
Avg merge
4h 2m
Merged PRs (30d)
1

Description

It is very difficult (impossible for me) to figure out if multiple storage accounts can be accessed from an azure function using managed identity.

Despite following the documentation I have been able to find, I still get a 403 when trying to access the storage account from an azure function with the documented setup for RBAC. As [per the docs](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-based-connections-tutorial#use-managed-identity-for-azurewebjobsstorage) the IAM on storage accounts are set to Blob Storage Owner / Reader for the function.

Public network access is enabled from all networks to the storage account to exclude this as an issue.

I have not been able to find a tutorial or documentation of granting access to multiple storage accounts. The only hands on guide I could find is [limited to the default function storage account](https://learn.microsoft.com/en-us/azure/azure-functions/functions-identity-based-connections-tutorial#use-managed-identity-for-azurewebjobsstorage) requiring an explicit postfix on the default storage naming convention. (I did a brute force experiment with the same postfix naming convention on the other storage accounts with no luck)

- If granting access to multiple storage accounts with managed identity is not possible this should be documented.
- If it is possible to grant access to multiple storage accounts with managed identity a functional guide is required, as the current documentation seems inadequate.

I have raised a question on [SO](https://stackoverflow.com/questions/77082120/how-do-i-give-an-azure-function-access-to-multiple-blob-storage-accounts-wit) with more details.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.