Managed Identity authentication uses managed identities in Azure Active Directory to authenticate and authorize access to Azure resources securely.
Before you use managed identity authentication to connect to Microsoft Azure Data Lake Storage Gen2, be sure to complete certain prerequisites.
Create an Azure virtual machine.
To configure
managed identity authentication in a Microsoft Azure Data Lake Storage Gen2
connection, select the Azure virtual machine on which you have installed the
Secure Agent.
Install the Secure Agent on the Azure virtual machine.
Enable system assigned identity or user assigned
identity for the Azure virtual machine.
If you enable system assigned
identity, assign the required role or permissions to the Azure virtual
machine to run mappings and tasks. If you enable user assigned identity,
assign the required role or permissions to the user assigned identity. For
example, if you use role-based access control, assign the Storage Blob Data
Contributor role and if you use access control lists, assign the read,
write, and execute permissions. If you enable both and do not specify the
client ID, the system assigned identity is used for authentication.
After you add or remove a managed identity, restart the Azure virtual machine.
ASK INFAPreview
