Microsoft Azure Managed Identity Deep Dive

  Переглядів 70,193

John Savill's Technical Training

John Savill's Technical Training

День тому

A deep dive into using managed identities and understanding what makes them tick!
🔎 Looking for content on a particular topic? Search the channel. If I have something it will be there!
▬▬▬▬▬▬ C H A P T E R S ⏰ ▬▬▬▬▬▬
0:00 - Introduction
0:22 - Why we need an identity for a resource
2:00 - Using a traditional service principal and how they work
10:19 - Managed identity introduction
12:30 - Services that support managed identity
13:29 - Types of managed identity
18:20 - Using managed identities
20:30 - Giving a managed identity a role on another resource
22:54 - Looking at MI service principals
25:35 - Managed identity resource provider
27:00 - Demoing a system-assigned managed identity in a VM
32:06 - MI with key vault pattern demo
36:03 - How this works behind the scenes
38:20 - Using a user-assigned managed identity
42:26 - Detail on the access token and MI benefits
45:52 - Some best practices
47:03 - Azure Arc support
47:32 - Summary
▬▬▬▬▬▬ K E Y L I N K S 🔗 ▬▬▬▬▬▬
► Whiteboard:
🔗 github.com/johnthebrit/Random...
► Demo script:
🔗 github.com/johnthebrit/Random...
► Demo script markdown:
🔗 github.com/johnthebrit/Random...
► Resources that support MI:
🔗 docs.microsoft.com/azure/acti...
► MI Overview:
🔗 docs.microsoft.com/azure/acti...
► How to use MI token:
🔗docs.microsoft.com/azure/acti...
► How MI's work:
🔗docs.microsoft.com/azure/acti...
▬▬▬▬▬▬ Want to learn more? 🚀 ▬▬▬▬▬▬
📖 Recommended Learning Path for Azure
🔗 learn.onboardtoazure.com
📅 Weekly Azure Update
🔗 • Azure Infrastructure U...
☁ Azure Master Class
🔗 • Microsoft Azure Master...
⚙ DevOps Master Class
🔗 • DevOps Master Class
💻 PowerShell Master Class
🔗 • PowerShell Master Class
🎓 Certification Cram Videos
🔗 • Microsoft Certificatio...
❔ Question about my setup?
🔗 • My Setup
👕 Cure Childhood Cancer Charity T-Shirt Channel Store
🔗 johns-t-shirts-store.creator-...
SUBSCRIBE ✅ / @ntfaqguy
#microsoft #azure #johnsavillstechnicaltraining #onboardtoazure #cloud

КОМЕНТАРІ: 90
@NTFAQGuy
@NTFAQGuy 2 роки тому
Hey everyone, welcome to this video all about managed identities! Please make sure to read the description for the chapters and key information about this video and others. ⚠ P L E A S E N O T E ⚠ 🔎 If you are looking for content on a particular topic search the channel. If I have something it will be there! 🕰 I don't discuss future content nor take requests for future content so please don't ask 😇 Thanks for watching! ☁🤙💪
@maneesh981
@maneesh981 Рік тому
You are Marvellous Super Genius
@_rmc
@_rmc 2 роки тому
The best bit about studying Azure isn’t only the curated learn cert paths but also that John somehow manages to bring out a new view about a month or two ahead of my learning curve; the deep dive videos are the best way to get ahead quickly and then read the docs and get hands on at a slower pace. Excellent as always John. Always looking forward to what comes next ;)
@lltagged
@lltagged 2 місяці тому
Great way to spend a saturday evening: Watching John explain stuff you did not know before.
@Semtx552
@Semtx552 2 роки тому
incredibly valuable info, cheers! Especially the start where you articulate the ent app / reg app / SP interaction. i still struggle with that bit. I will rewatch your video dedicated to that subject.
@amirjsayes
@amirjsayes Рік тому
Simply outstanding! Very clear and very informative and enjoyable to watch 💪🏼 Keep up the great work
@niraj7616
@niraj7616 2 роки тому
Excellent, watching this with a cup of tea in cold England 🥶 👍
@robannmateja5000
@robannmateja5000 Рік тому
Listened to this again for the second time (refresher). As usual, awesome content and presentation. Thank you!
@rgulamhussein
@rgulamhussein Рік тому
Thank you for such a clear explanation John. Your video is worth a thousand pages of docs!
@robadobdob
@robadobdob Рік тому
I've literally just picked up a task to convert our apps to use Managed Identity so this video has been a godsend for explaining the ins and outs of it.
@gunknown370
@gunknown370 Рік тому
I'm studying for the az-500 and your content is just the best out there! thanks for this
@yasimatech9769
@yasimatech9769 4 місяці тому
Many thanks John, really learnt a lot from this session on managed identities in Entra ID (aka Azure). You've really nailed it in my head 💯
@expat64
@expat64 2 роки тому
Outstanding session John! I knew a fair bit of this already, but you clarified the picture, as you always do, and filled the remaining gaps for me. This will also be invaluable training for my team! 🙂
@NTFAQGuy
@NTFAQGuy 2 роки тому
Awesome to hear! 🤙
@JeevarajanKumar
@JeevarajanKumar Рік тому
+1
@naveenkumarn9917
@naveenkumarn9917 Рік тому
Good content and delivery.Well prepared commands. Really helped me to visualize. Thanks John
@gwcooley
@gwcooley 2 роки тому
Great overview, excellent engaging teaching style. Thank you. Onward and upward!
@NTFAQGuy
@NTFAQGuy 2 роки тому
Glad you enjoyed it!
@lj7894
@lj7894 2 роки тому
"Simplicity is Intelligence " Jiddu Krishnamurti - thank you John for makings things in Azure simple again! :)
@NTFAQGuy
@NTFAQGuy 2 роки тому
My pleasure! Thank you!
@amirjsayes
@amirjsayes 6 місяців тому
Amazing 48 minutes of great content! Great work John 🎉
@agostinopugliese5288
@agostinopugliese5288 Рік тому
John, this video is amazing as always. Kudos to you
@cma9br
@cma9br 2 роки тому
I am a big fan of managed identities and you make things easy to learn
@ehickeytube
@ehickeytube Рік тому
Thanks John. Great content and better delivery
@s3999
@s3999 2 роки тому
John, that video is simply brilliant. Kudos to you.
@James-sc1lz
@James-sc1lz 2 роки тому
I needed this and you explained it really well as usual so thank you
@michield6812
@michield6812 11 місяців тому
Outstanding presentation. A lot of information in a short time.
@a29miller
@a29miller Рік тому
Great Video! Gave me a much better understanding of this managed identity topic!!
@olegshalnov1028
@olegshalnov1028 2 роки тому
Great article! Thank you for doing this!
@wolkwijs324
@wolkwijs324 2 роки тому
Again a gem of a video! Thanks for another great deep dive!
@NTFAQGuy
@NTFAQGuy 2 роки тому
Very welcome 🤙
@wesleygyger1210
@wesleygyger1210 Рік тому
Good stuff. I didn't know what I didn't know until I watched this. Thanks for helping me understand this.
@atulpatel8708
@atulpatel8708 2 роки тому
Fantastic video on Azure Managed Identities, thank-you so much !
@NTFAQGuy
@NTFAQGuy 2 роки тому
You are welcome
@rupeshchoudhary9237
@rupeshchoudhary9237 Рік тому
Great teaching skills. .loved the whole explanation Bit . I would love enroll for a course on whole azure series if any.
@timurkalizhanov5281
@timurkalizhanov5281 3 місяці тому
Very clear, structured and detailed explanation! Thank you very, very much for what you are doing!!!!
@NTFAQGuy
@NTFAQGuy 3 місяці тому
You're very welcome!
@robbrinkkemper1702
@robbrinkkemper1702 5 місяців тому
I'm really thankful for the lessons learned from Azure Managed Identities. They've been incredibly valuable.😊📚🙏
@NTFAQGuy
@NTFAQGuy 5 місяців тому
Happy to hear that!
@matthewmarquis4266
@matthewmarquis4266 Рік тому
Thank you so much for this break down
@oliviermalfroidt6405
@oliviermalfroidt6405 2 роки тому
Thank you for this amazing content.
@christianibiri
@christianibiri 2 роки тому
I learned a lot with this video! thank you sir!
@NTFAQGuy
@NTFAQGuy 2 роки тому
Welcome
@BhanuPratap88
@BhanuPratap88 Рік тому
Thanks a lot great explanation of a very complex topic 👏👏
@Mo-iu3jf
@Mo-iu3jf Рік тому
Awesome video, thanks a lot for sharing
@islamtoghuj
@islamtoghuj Рік тому
Thank you our brother.
@michaelwaterman3553
@michaelwaterman3553 10 місяців тому
This is freaking brilliant!!! Thanks 🙏
@NTFAQGuy
@NTFAQGuy 10 місяців тому
Glad you like it!
@cnchandroo
@cnchandroo 2 роки тому
Thank you John for yet another wonderful session. It helped me to understand better how MI works internally and used with Azure resources for access management.
@NTFAQGuy
@NTFAQGuy 2 роки тому
Wonderful!
@JeremyTBradshaw
@JeremyTBradshaw Рік тому
That was really great! Thanks very much.
@ranajitjana4030
@ranajitjana4030 2 роки тому
Too good. Thank you for the video
@michaelmendoza9824
@michaelmendoza9824 2 роки тому
Absolutely Excellent Azure Managed Identity lesson/explanation! John Savill, you are an Azure evangelist Super Hero!!! I truly appreciate you! MM
@NTFAQGuy
@NTFAQGuy 2 роки тому
Thank you
@hutchm92
@hutchm92 3 місяці тому
Great explanation!
@NTFAQGuy
@NTFAQGuy 3 місяці тому
Glad it was helpful!
@toddhu2498
@toddhu2498 Рік тому
I struggle a long time how MI magically dealt all the headache in SP. read all type of docs but always the information is here and there. The IMDS AND MIRP is really the key, surprisingly this video can use 40min to explain all my question that I researched like 1 week..
@user-sx9tk3yu5m
@user-sx9tk3yu5m 3 місяці тому
John the way you explain is just amazing ; that whiteboard is the best i have ever seen, it has a true Power 😁>>>>>>>> thanks for these series
@NTFAQGuy
@NTFAQGuy 3 місяці тому
Welcome!
@lightyagami0ben
@lightyagami0ben 2 роки тому
Great content !
@fxylk
@fxylk 2 роки тому
Amazing 🤩
@NTFAQGuy
@NTFAQGuy 2 роки тому
Thanks 🤙
@stepbabe100
@stepbabe100 2 роки тому
John Why am I only discovering you now? Awesome training and wonderful white boarding that is sorely lacking in other training I have watched. Keep up the awesome work? Any insight into Azure Synapse ?
@NTFAQGuy
@NTFAQGuy 2 роки тому
Glad you enjoy the content.
@SteveBonds
@SteveBonds 2 роки тому
John does a FANTASTIC job of using named chapters to enable us to search his content for specific things. I found his data services video which has a chapter on Synapse this way. He also talks about how to search his channel in his recent "learning Azure in 2022" video, which is a great intro to how to use all this amazing content.
@stepbabe100
@stepbabe100 2 роки тому
@@SteveBonds thank you much appreciated! I will go find that vid !
@chaddoyle6911
@chaddoyle6911 2 роки тому
Super Cool Stuff! I’ve just started learning these concepts and your teaching style is quite good. I have a question that came out of this video and that is that recently I decided to use a system mi even though there were multiple resources that could benefit from a user mi. I think I did it because there were trade off(s). Is there a simple answer and if not would you consider talking about the differences or sending me a link where you have talked about them?
@NTFAQGuy
@NTFAQGuy 2 роки тому
I talked about why use UA-MI in the video. Don't really have anythign beyond what I explained.
@omartin2009
@omartin2009 2 роки тому
Excellent as always!! How do apps, once IMDS (in the example of the VM), gets the refreshed token? I guess as a dev (or a user of the VM), I'd have to manually get a refresh token (or code that to refresh the token every now and depending on the kind of resource) by doing some kind of CURL request (or PS or other method) because the token I downloaded at t=0 will become invalid at t=12h, right?
@NTFAQGuy
@NTFAQGuy 2 роки тому
There is no refresh token. As I said in videos its app only flow with long lived access token. MSAL etc will take care.
@MrZakiHaider
@MrZakiHaider 2 роки тому
Great. thank you :)
@va55ag0
@va55ag0 2 роки тому
Thanks again for another great video. Quick question about my scenario: My app is an API and, and therefore has its own App Registration (an identity!). It accesses Azure Storage accounts plus makes calls other APIs using Oauth 2.0 client credentials flows (I.e. I have to grant my app registration permission to the scopes of the other app registrations). In this scenario, would you still recommend using the managed identity to access the Azure resources? To me, it seems strange for my app to have multiple identities.
@NTFAQGuy
@NTFAQGuy 2 роки тому
like all consulting i think it depends :-) there are resiliency benefits as i talked about but maybe the complexity not worth it for you to have multiple.
@antoniemerks1375
@antoniemerks1375 7 місяців тому
Thanks
@StarvedForTime
@StarvedForTime Рік тому
This video saved my ass. Liked and subbed
@cdoex1
@cdoex1 2 роки тому
Thank you, this was a very good MI deep dive. But is it possible to have an even deeper dive? Regarding the IMDS endpoint in the example there were no authentication to that service present, so I guess that is handled some other way? The AppService MI sidecar uses some sort of internally injected private key for that) (In certain situations using the C# libraries for this, the proactive token refresh seems to not start after 12h, or half the token lifetime, but rather 5m before expiry, resiliency effectively defeated...)
@NTFAQGuy
@NTFAQGuy 2 роки тому
I don't think a deeper dive would be of interest to most. I gave detail on how it works but really all you care about is in your service/language how to request it.
@cdoex1
@cdoex1 2 роки тому
@@NTFAQGuy Thank you, I managed to find the documentation that told the story on how IMDS worked and even posted the link here in a response to my comment above, but now that response seems to be missing.
@NTFAQGuy
@NTFAQGuy 2 роки тому
@@cdoex1 I did include in the video description the link to the MS how it works. Links in comments are disabled so thats likely why not showing.
@cdoex1
@cdoex1 2 роки тому
@@NTFAQGuy Ah, of course, but who reads the description 🤦‍♂🤦‍♂ sorry...
@NTFAQGuy
@NTFAQGuy 2 роки тому
@@cdoex1 lol
@expat64
@expat64 2 роки тому
So John, am I right in thinking that, in your VM scenario, anybody who can log into the VM implicitly has permission to use any of the MIs assigned to the VM, meaning you need to be aware that when granting somebody access to the VM, you are also granting them permission to use the MI, and if so, is this something that should be highlighted?
@NTFAQGuy
@NTFAQGuy 2 роки тому
Right anything within that vm can use the MIs associated with it.
@AleksandarIvanov69
@AleksandarIvanov69 2 роки тому
For the algorithm! 😁
@HenryBuild-sp6or
@HenryBuild-sp6or 2 роки тому
your biceps as a load balancer :)
@NTFAQGuy
@NTFAQGuy 2 роки тому
lol
@RonaldPostelmans
@RonaldPostelmans 2 роки тому
create explanation of managed identities, thanks
@jatinnandwani6678
@jatinnandwani6678 2 роки тому
Hey John thanks so much Can I buy you a coffee or can you please enable some method of contributing back to this channel
@NTFAQGuy
@NTFAQGuy 2 роки тому
That’s very kind but I don’t want to earn money from this channel. It’s my way of giving back to the community which is why I have no adverts etc. Just help spread word of the channel and help it grow would be awesome 🤙
@jean-baptistelasselle4562
@jean-baptistelasselle4562 Рік тому
"some people" 😂🤣
Microsoft Azure AD Identity Protection Deep Dive
56:26
John Savill's Technical Training
Переглядів 36 тис.
PASSKEYS - What they are, why we want them and how to use them!
1:10:42
John Savill's Technical Training
Переглядів 19 тис.
Не пей газировку у мамы в машине
00:28
Даша Боровик
Переглядів 1,7 млн
Nemo - The Code (LIVE) | Switzerland🇨🇭| Grand Final | Eurovision 2024
03:28
Eurovision Song Contest
Переглядів 14 млн
格斗裁判暴力执法!#fighting #shorts
00:15
武林之巅
Переглядів 7 млн
Managed Identities with Azure AD (Active Directory) Tutorial
31:54
Adam Marczak - Azure for Everyone
Переглядів 137 тис.
Azure Key Vault RBAC and Policy Deep Dive
20:13
John Savill's Technical Training
Переглядів 13 тис.
NEW GPT-4o: My Mind is Blown.
6:28
Joshua Chang
Переглядів 10 тис.
Workload Identity Protection with Azure AD Identity Protection
27:08
John Savill's Technical Training
Переглядів 10 тис.
Which AI should you use? Copilot, Copilot Studio, Azure AI Studio and more!
1:19:08
John Savill's Technical Training
Переглядів 4,7 тис.
Understanding DNS in Azure
26:59
John Savill's Technical Training
Переглядів 108 тис.
Azure Automation and Managed Identities
12:41
Travis Roberts
Переглядів 16 тис.
OpenAI "SHOCKED" Everyone! Voice, Vision, & Free?!
8:58
Theoretically Media
Переглядів 15 тис.
Я Создал Новый Айфон!
0:59
FLV
Переглядів 2,9 млн
Рекламная уловка Apple 😏
0:59
Яблык
Переглядів 798 тис.