You are configuring security for an Azure Function App that needs to read files from an Azure Storage account. You want to use a managed identity to authenticate. You must determine the characteristics of system-assigned and user-assigned managed identities to choose the best option.
Which of the following statements about these managed identity types are correct? (Select TWO)
- A system-assigned managed identity is automatically deleted when the associated Azure resource is deleted.Answer
- BIn an Azure Resource Manager (ARM) template, setting the identity type property to 'SystemAssigned' enables a user-assigned managed identity.
- A user-assigned managed identity is created as a standalone Azure resource and its lifecycle is independent of the resources it is assigned to.Answer
- DA user-assigned managed identity is automatically deleted when the Azure resource it is assigned to is deleted.
Answer
A system-assigned managed identity is automatically deleted when the associated Azure resource is deleted, and a user-assigned managed identity is created as a standalone Azure resource whose lifecycle is independent of the resources it is assigned to.
The correct statements correctly describe the lifecycle boundaries. A system-assigned managed identity is enabled directly on a resource, and deleting that resource automatically deletes the identity. Conversely, a user-assigned managed identity is created as an independent resource in Azure, meaning its lifecycle is separate and it remains in existence even if all resources utilizing it are deleted.
Step-by-Step Solution
Key Concept
Understanding the differences in lifecycle, resource sharing, and configuration properties between system-assigned and user-assigned managed identities in Azure.