microsoft / microsoft/sre-agent

[Issue] ADX/Kusto connector wizard missing "Use managed identity as federated identity credential" checkbox — blocks cross-tenant Kusto access

Open
#297 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
PowerShell
Stars
160
Forks
97
Avg merge
2d 5h
Merged PRs (30d)
12

Description

Title:

Body:

Summary The docs state MI + FIC is the only supported method for cross-tenant Kusto access, but the Azure Data Explorer connector wizard exposes no way to configure it. The capability appears to exist in the runtime but has no configuration surface.

Expected Per capabilities/cross-tenant-access.mdx → "What you can do cross-tenant": Query Kusto databases | Azure Data Explorer | MI + FIC | Kusto connector. The same page's "How MI + FIC works" section explicitly covers Kusto: "For Kusto connectors, the platform's outbound proxy handles token injection automatically... using the FIC-configured identity."

Actual The ADX connector wizard (Builder → Connectors → Add connector → Azure Data Explorer) has no FIC checkbox at any step — Set up connector, Add clusters, or Review + test. Only Name, Managed identity, and per-group Managed identity are available. The checkbox is present only in the Azure DevOps "Add repository" wizard.

Evidence the runtime supports it The agent's own connector configuration models all three properties on Kusto and KustoClient connector types:

useManagedIdentityAsFic
federatedClientId
federatedTenantId

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with the Azure Data Explorer connector wizard steps named in the issue and compare them with the Azure DevOps Add repository wizard, where the checkbox already exists. Read capabilities/cross-tenant-access.mdx and inspect the Kusto and KustoClient configuration models for useManagedIdentityAsFic, federatedClientId, and federatedTenantId. Done means the ADX wizard exposes and preserves the FIC settings for connector configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
cloud, frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.