[FEATURE REQ] Azure.Identity/DAC should log ClientId for user-assigned managed identities #1978
Labels
Azure.Identity
The azure_identity crate
Client
This issue points to a problem in the data-plane of the library.
feature-request
This issue requires a new behavior in the product in order be resolved.
Library name
Azure.Identity
Please describe the feature.
Today we don't directly log the ClientId when selecting a user-assigned identity to use with ManagedIdentityCredential. Customers instead need to change verbosity and dig into MSAL logs instead which isn't nearly as obvious.
We expect multiple user-assigned managed identity scenarios to become much more common with future Aspire work, so surfacing the ClientId will make it a lot easier to spot config problems (i.e., am I trying to access Storage with an identity scoped to just reading photos? or the identity created for the logical container? or ...?).
The text was updated successfully, but these errors were encountered: