How to Setup Auth with Managed Identity - Build a CRUD API with Azure Functions and SQL server

[@viktor_tindula]

Very good video. I like the schemas you made for architecture purposes. It gives a nice overview.

[@MrBalajiuppala]

This video is really helpful. This saved my exploration time.

[@racharacharam]

Crisp and clear 👍🏻👍🏻

[@tadastadux]

Amazing video. Please advise how to create tests for the app?

[@YakubuAzure]

Where can we find the source code for this?

[@venkataramanapotluri1758]

My SQL SERVERE MANAGED INSTANCE. is on a different resource group and different subscription that of Azure Functions and Data factory can you please tell me how to resolve this. Your help is highly appreciated

[@azureappmodernization9036]

You may be able to move your resources across subscriptions and resource groups. In order to find out, open up your group and select "move" on the overview screen. Select the target resource group and then the resources. The system will run a validation and let you know if a move is allowed. Finally select move to start the process.

[@azureappmodernization9036]

learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-resource-group-and-subscription#use-the-portal

[@diptanu.saha.knightKing]

can you share the git repo - thanks for the video

[@walkingdadjokes6099]

still in pre-release :(

[@EngineersDrive]

Where was the authentication. Misleading title

[@azureappmodernization9036]

Sorry, I should have been clearer in the content. This video shows how to use AD for identity and then you use RBAC to authorize that identity. The first step is to give the function an identity. You can provide you own identity certificates, or you can let Azure manage the identity lifecycle for you. Once you assign the managed identity, you turn on AD authentication which will validate the identity for every connection. Then on the SQL side, you use RBAC to grant access to that identity. So, the combination of these statements: CREATE USER [FNName] FROM EXTERNAL PROVIDER and ALTER ROLE db_datareader ADD MEMBER [FNName] will grant the identity 'FNName' reader access.