Azure CLI reference command index for Azure identities

There are many Azure CLI reference commands that help you to work with Azure identities. This article provides a list of Azure CLI commands and the quickstart, how-to guide or tutorial that shows the use of the command. For identity commands without an article, use the reference example (the link in column one).

Note

Not all Azure CLI commands containing the word "identity" are about Microsoft Entra ID managed identities. This article is an index of Azure CLI commands to help you manage any type of Azure identity.

az acr

Reference subgroup	Azure CLI article showing reference use
az acr identity	Troubleshoot a customer-managed key
	Tutorial: Build and deploy from source code to Azure Container Apps

az aks

Reference subgroup	Azure CLI article showing reference use
az aks pod-identity	Use Microsoft Entra pod-managed identities in Azure Kubernetes Service (Preview)
	Migrate from pod managed-identity to workload identity
az aks pod-identity exception	Use Microsoft Entra pod-managed identities in Azure Kubernetes Service (Preview)
	Troubleshoot Azure Kubernetes Service backup and restore

az appconfig

Reference subgroup	Azure CLI article showing reference use
az appconfig identity	Use customer-managed keys to encrypt your App Configuration data
	Add managed identities for Azure App Configuration

az backup

Reference subgroup	Azure CLI article showing reference use
az backup vault identity	Encrypt backup data by using customer-managed keys
	Save and manage MARS agent passphrase securely in Azure Key Vault

az communication

Reference subgroup	Azure CLI article showing reference use
az communication identity	How to use Managed Identity with Azure Communication Services
az communication identity token	Quickstart: Join a room call
	Pre-call diagnostic overview
	Adding visual effects to a video call

az containerapp

Reference subgroup	Azure CLI article showing reference use
az containerapp identity	Managed identities in Azure Container Apps
	Deploy to Azure Container Apps from Azure Pipelines
	Deploy to Azure Container Apps with GitHub Actions
	Migrate a Python application to use passwordless connections with Azure SQL Database
	Tutorial: Build and deploy a Python web app with Azure Container Apps and PostgreSQL
	Migrate an application to use passwordless connections with Azure Database for PostgreSQL
	Migrate an application to use passwordless connections with Azure Blob Storage
	Tutorial: Use code interpreter sessions in LangChain with Azure Container Apps
	Tutorial: Use code interpreter sessions in Semantic Kernel with Azure Container Apps
	Authenticating Azure-hosted apps to Azure resources with the Azure SDK for Go

az cosmosdb

Reference subgroup	Azure CLI article showing reference use
az cosmosdb identity	Configure managed identities with Microsoft Entra ID for your Azure Cosmos DB account
	Create and manage container copy jobs in Azure Cosmos DB (Preview)
	Access Azure Key Vault from Azure Cosmos DB using a managed identity
	Configure customer-managed keys for your Azure Cosmos DB account with Azure Managed HSM Key Vault

az dt

Reference subgroup	Azure CLI article showing reference use
az dt identity	Set up an Azure Digital Twins instance and authentication (CLI)

az functionapp

Reference subgroup	Azure CLI article showing reference use
az functionapp identity	Create your first containerized functions on Azure Container Apps
	Tutorial: Build out an end-to-end solution
	Enable API analysis in your API center - self-managed
	Ingest IoT Hub telemetry into Azure Digital Twins
	Set up twin-to-twin event handling

az identity

Reference subgroup	Azure CLI article showing reference use
az identity	Manage user-assigned managed identities
	Use Key Vault references as app settings in Azure App Service and Azure Functions
	How to use managed identities for App Service and Azure Functions
	Transfer an Azure subscription to a different Microsoft Entra directory
	Use a managed identity in Azure Kubernetes Service (AKS)
	Configure a custom container for Azure App Service
	Deploy and configure workload identity on an Azure Kubernetes Service (AKS) cluster
	Connect your Azure identity provider to the Azure Key Vault Secrets Store CSI Driver in Azure Kubernetes Service (AKS)
	Migrate custom software to Azure App Service using a custom container
	Provision and publish a bot
az identity federated-credential	Deploy and configure workload identity on an Azure Kubernetes Service (AKS) cluster
	Connect your Azure identity provider to the Azure Key Vault Secrets Store CSI Driver in Azure Kubernetes Service (AKS)
	Configure a user-assigned managed identity to trust an external identity provider
	Tutorial: Deploy applications using GitOps with Flux v2
	Quickstart: Deploy Application Gateway for Containers ALB Controller
	Migrate from pod managed-identity to workload identity
	Securely scale your applications using the KEDA add-on and workload identity on Azure Kubernetes Service (AKS)
	Deploy an AI model on Azure Kubernetes Service (AKS) with the AI toolchain operator (preview)
	Use the Secret Store extension to fetch secrets for offline access in Azure Arc-enabled Kubernetes clusters
	Deploy a highly available PostgreSQL database on AKS

az image

Reference subgroup	Azure CLI article showing reference use
az image builder identity	Troubleshoot Azure VM Image Builder

az iot

Reference subgroup	Azure CLI article showing reference use
az iot central app identity	Export IoT data to Blob Storage
	Export IoT data to Event Hubs
	Manage and monitor IoT Central applications
	Export IoT data to Azure Data Explorer
	Export IoT data to Service Bus
az iot hub device-identity	Create and provision an IoT Edge device on Linux using symmetric keys
	Create and manage device identities
	Quickstart: Deploy your first IoT Edge module to a virtual Linux device
	Quickstart: Deploy your first IoT Edge module to a Windows device
	Tutorial: Send device data to Azure Storage using IoT Hub message routing
	Quickstart: Send telemetry from a device to an IoT hub and monitor it with the Azure CLI
	Tutorial - Use MQTT to develop an IoT device client without using a device SDK
	Tutorial: Build out an end-to-end solution
	Create and provision an IoT Edge device on Linux using X.509 certificates
	Install and run the Spatial Analysis container (preview)
az iot hub device-identity connection-string	Create and provision an IoT Edge device on Linux using symmetric keys
	Create and manage device identities
	Quickstart: Deploy your first IoT Edge module to a virtual Linux device
	Quickstart: Deploy your first IoT Edge module to a Windows device
	Tutorial: Build out an end-to-end solution
	Install and run the Spatial Analysis container (preview)
	Create and provision an IoT Edge for Linux on Windows device using symmetric keys
	Tutorial: Use a simulated device to test connectivity with your IoT hub
	Use Visual Studio 2022 to develop and debug modules for Azure IoT Edge
	Tutorial: Configure your devices from a back-end service
az iot hub identity	Configure IoT Hub file uploads using Azure CLI
az iot hub module-identity	Deploy Azure IoT Edge modules with Azure CLI
az iot ops identity	Enable secure settings in Azure IoT Operations

az mysql

Reference subgroup	Azure CLI article showing reference use
az mysql flexible-server identity	Use Java and JDBC with Azure Database for MySQL - Flexible Server
	Migrate an application to use passwordless connections with Azure Database for MySQL
	Configure passwordless database connections for Java apps on Oracle WebLogic Server

az networkcloud

Reference subgroup	Azure CLI article showing reference use
az networkcloud clustermanager identity	Cluster Manager: How to manage the Cluster Manager in Operator Nexus

az nexusidentity

Reference subgroup	Azure CLI article showing reference use
az nexusidentity	Use Method D v2.0 break glass access

az policy

Reference subgroup	Azure CLI article showing reference use
az policy ment identity	Built-in policies for Azure Monitor

az postgres

Reference subgroup	Azure CLI article showing reference use
az postgres flexible-server identity	Configure system or user assigned managed identities
	System assigned managed identity
	User assigned managed identities

az redis

Reference subgroup	Azure CLI article showing reference use
az redis identity	Managed identity for storage

az spring

Reference subgroup	Azure CLI article showing reference use
az spring app identity	Migrate a Python application to use passwordless connections with Azure SQL Database
	Migrate an application to use passwordless connections with Azure Database for PostgreSQL
	Migrate an application to use passwordless connections with Azure Blob Storage
	Enable system-assigned managed identity for an application in Azure Spring Apps
	Migrate a .NET application to use passwordless connections with Azure SQL Database
	Migrate an application to use passwordless connections with Azure Database for MySQL
	Migrate an application to use passwordless connections with Azure Service Bus
	Migrate a Node.js application to use passwordless connections with Azure SQL Database
	Migrate a Java application to use passwordless connections with Azure SQL Database
	Migrate an application to use passwordless connections with Azure Event Hubs

az synapse

Reference subgroup	Azure CLI article showing reference use
az synapse workspace managed-identity	Move an Azure Synapse Analytics workspace from one region to another

az vm

Reference subgroup	Azure CLI article showing reference use
az vm identity	Connect your Azure identity provider to the Azure Key Vault Secrets Store CSI Driver in Azure Kubernetes Service (AKS)
	Sign in to a Linux virtual machine in Azure by using Microsoft Entra ID and OpenSSH
	Connect with managed identity to Azure Database for PostgreSQL - Flexible Server
	Use an Azure managed identity to authenticate to an Azure container registry
	Use the Linux diagnostic extension 4.0 to monitor metrics and logs
	Tutorial: Use Azure Key Vault with a virtual machine in .NET
	Send Prometheus metrics from virtual machines, scale sets, or Kubernetes clusters to an Azure Monitor workspace
	Authenticate Azure-hosted apps to Azure resources with the Azure SDK for .NET
	Migrate a Python application to use passwordless connections with Azure SQL Database
	Authenticating Azure-hosted apps to Azure resources with the Azure SDK for Python

az vmss

Reference subgroup	Azure CLI article showing reference use
az vmss identity	Connect your Azure identity provider to the Azure Key Vault Secrets Store CSI Driver in Azure Kubernetes Service (AKS)
	Sign in to a Linux virtual machine in Azure by using Microsoft Entra ID and OpenSSH
	Fail to pull images from Azure Container Registry to Azure Kubernetes Service cluster
	Use the Linux diagnostic extension 4.0 to monitor metrics and logs
	Send Prometheus metrics from virtual machines, scale sets, or Kubernetes clusters to an Azure Monitor workspace
	Send Prometheus data to Azure Monitor by using managed identity authentication
	Create a chaos experiment that uses an agent-based fault with the Azure CLI

az webapp

Reference subgroup	Azure CLI article showing reference use
az webapp identity	How to use managed identities for App Service and Azure Functions
	Tutorial: Connect to SQL Database from .NET App Service without secrets using a managed identity
	Configure a custom container for Azure App Service
	Connect to and query Azure SQL Database using Python and the pyodbc driver
	Migrate custom software to Azure App Service using a custom container
	Tutorial: Use a managed identity to connect Key Vault to an Azure web app in .NET
	Tutorial: Connect to Azure databases from App Service without secrets using a managed identity
	Authenticate Azure-hosted apps to Azure resources with the Azure SDK for .NET
	Migrate a Python application to use passwordless connections with Azure SQL Database
	Tutorial: Configure a sidecar container for a Linux app in Azure App Service