You are configuring security for an Azure Function App that needs to read files from an Azure Storage account. You want to use a managed identity to authenticate. You must determine the characteristics of system-assigned and user-assigned managed identities to choose the best option.
Which of the following statements about these managed identity types are correct? (Select TWO)
- A system-assigned managed identity is automatically deleted when the associated Azure resource is deleted.Cevap
- BIn an Azure Resource Manager (ARM) template, setting the identity type property to 'SystemAssigned' enables a user-assigned managed identity.
- A user-assigned managed identity is created as a standalone Azure resource and its lifecycle is independent of the resources it is assigned to.Cevap
- DA user-assigned managed identity is automatically deleted when the Azure resource it is assigned to is deleted.
Cevap
A system-assigned managed identity is automatically deleted when the associated Azure resource is deleted, and a user-assigned managed identity is created as a standalone Azure resource whose lifecycle is independent of the resources it is assigned to.
The correct statements correctly describe the lifecycle boundaries. A system-assigned managed identity is enabled directly on a resource, and deleting that resource automatically deletes the identity. Conversely, a user-assigned managed identity is created as an independent resource in Azure, meaning its lifecycle is separate and it remains in existence even if all resources utilizing it are deleted.
Adım Adım Çözüm
Anahtar Kavram
Understanding the differences in lifecycle, resource sharing, and configuration properties between system-assigned and user-assigned managed identities in Azure.