SecurityInsight settings · Settings > Sign-in & Azure resources
Jobs sign in with managed identity
| Key | SI_Bootstrap_UseManagedIdentity |
|---|---|
| Where | Settings > Sign-in & Azure resources > Container hosting |
| Type | On / off |
| Default | Not set: the managed identity anyway, unless the configuration carries a client secret (an existing install keeps it). |
| Edition | Community |
What it does
Makes all container jobs sign in as one user-assigned managed identity, said explicitly.
When enabled
On, setup creates the identity and the jobs carry no secret; the image is also pulled as that identity. Its rights are listed, and granted only when setup is told to grant them; some database access is a one-time manual step.
When disabled
Not set: the managed identity anyway, unless the configuration carries a client secret (an existing install keeps it).
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: To move an existing install that signs in with a client secret to a managed identity; guided installs switch it on.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack