Skip to content

Comments

docs: Add explicit User-Assigned Managed Identity (UAMI) example for Blob Storage binding#128222

Open
paulyuk wants to merge 1 commit intoMicrosoftDocs:mainfrom
paulyuk:docs/uami-blob-storage-example
Open

docs: Add explicit User-Assigned Managed Identity (UAMI) example for Blob Storage binding#128222
paulyuk wants to merge 1 commit intoMicrosoftDocs:mainfrom
paulyuk:docs/uami-blob-storage-example

Conversation

@paulyuk
Copy link

@paulyuk paulyuk commented Feb 20, 2026

Summary

This PR adds a clearer example showing how to configure Blob Storage connections using a User-Assigned Managed Identity (UAMI) with explicit app settings.

Problem

The existing documentation mentions credential and clientId properties for user-assigned managed identities but lacks a concrete JSON example.

Solution

Added a new "User-assigned managed identity" subsection with:

  • A table showing the required properties including blob and queue service URIs
  • A complete JSON example developers can copy directly
  • A tip explaining when UAMI is recommended

Changes

  • includes/functions-storage-blob-connections.md: Added UAMI configuration example

Related

…orage

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@prmerger-automator
Copy link
Contributor

@paulyuk : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change.

@learn-build-service-prod
Copy link
Contributor

Learn Build status updates of commit c6dcd2f:

✅ Validation status: passed

File Status Preview URL Details
includes/functions-storage-blob-connections.md ✅Succeeded

For more details, please refer to the build report.

@prmerger-automator
Copy link
Contributor

PRMerger Results

Issue Description
File Change Percent This PR contains file(s) with more than 30% file change.

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a concrete, copy/paste-friendly documentation example for configuring Azure Functions Blob Storage bindings with a User-Assigned Managed Identity (UAMI) via explicit app settings.

Changes:

  • Added a new “User-assigned managed identity” subsection to the Blob Storage connection docs
  • Included a properties table and a full JSON app settings example
  • Added guidance on when UAMI is recommended

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +53 to +58
| Property | Environment variable template | Description | Example value |
|---------------------------|-----------------------------------------------------|--------------------------------------------|---------|
| Blob Service URI | `<CONNECTION_NAME_PREFIX>__blobServiceUri` | The data plane URI of the blob service. | `https://mystorageaccount.blob.core.windows.net` |
| Queue Service URI | `<CONNECTION_NAME_PREFIX>__queueServiceUri` | The data plane URI of the queue service (required for blob triggers). | `https://mystorageaccount.queue.core.windows.net` |
| Credential | `<CONNECTION_NAME_PREFIX>__credential` | Must be set to `managedidentity`. | `managedidentity` |
| Client ID | `<CONNECTION_NAME_PREFIX>__clientId` | The client ID of the user-assigned managed identity. | `00000000-0000-0000-0000-000000000000` |
Copy link

Copilot AI Feb 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The table rows/header are prefixed with double pipes (||), which will render an extra empty column and often breaks Markdown table formatting. Use a single leading pipe (|) for the header, separator, and each row so the table renders correctly.

Copilot uses AI. Check for mistakes.

#### User-assigned managed identity

To use a user-assigned managed identity, add the `credential` and `clientId` properties in addition to the service URI:
Copy link

Copilot AI Feb 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This sentence refers to a single 'service URI', but the section/table introduces two URIs (blobServiceUri and queueServiceUri). Consider rewording to 'service URIs' (or explicitly call out blob vs queue URIs) to avoid confusion.

Suggested change
To use a user-assigned managed identity, add the `credential` and `clientId` properties in addition to the service URI:
To use a user-assigned managed identity, add the `credential` and `clientId` properties in addition to the blob and queue service URIs:

Copilot uses AI. Check for mistakes.
@ttorble
Copy link
Contributor

ttorble commented Feb 20, 2026

@mattchenderson

Can you review the proposed changes?

IMPORTANT: When the changes are ready for publication, adding a #sign-off comment is the best way to signal that the PR is ready for the review team to merge.

#label:"aq-pr-triaged"
@MicrosoftDocs/public-repo-pr-review-team

@prmerger-automator prmerger-automator bot added the aq-pr-triaged tracking label for the PR review team label Feb 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants