Manage Azure Resources in Resource Group using VM Identity | Exam AZ-300

Configure Managed Identity for Azure Virtual Machine

Question

You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1.

VM1 runs services that will be used to deploy resources to RG1.

You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.

What should you do first?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

To ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1, you need to enable Managed Service Identity (MSI) for VM1.

Managed Service Identity (MSI) provides an automatically managed identity in Azure Active Directory (Azure AD) for your Azure services to authenticate with. With MSI, you can avoid the need to manage credentials for the services running on VM1.

Therefore, the correct answer is option D: From the Azure portal, modify the value of the Managed Service Identity option for VM1.

Here are detailed steps to enable Managed Service Identity for VM1:

  1. Navigate to the Azure portal and go to the VM1 blade in the Resource group RG1.

  2. Under the Settings section, select Identity.

  3. Set the System Assigned managed identity option to On.

  4. Click Save to save the changes.

Once the Managed Service Identity is enabled for VM1, the service running on VM1 can use the identity of VM1 to manage resources in RG1 without the need for managing credentials manually.