SecurityInsight settings · Settings > Advanced / diagnostics
Key Vault managed identity (older name)
| Key | SI_KvMiClientId |
|---|---|
| Where | Settings > Advanced / diagnostics |
| Type | Text |
| Default | Uses SI_ManagedIdentityClientId; otherwise the machine's own system managed identity |
| Edition | Community |
What it does
The client id of a user-assigned managed identity used to read Key Vault when no Azure sign-in exists yet. Older name for SI_ManagedIdentityClientId.
When set
Key Vault reads sign in as this user-assigned identity. It is ignored when SI_ManagedIdentityClientId is set, or when an Azure sign-in already exists.
When blank or default
Left blank, the default applies: Uses SI_ManagedIdentityClientId; otherwise the machine's own system managed identity
Risk and how to reverse it
A tuning or diagnostic setting: it mostly changes run time, cost or log detail. Leave it at the default unless support asks. Reversible at once.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only on older configurations that use a user-assigned identity; new installs use SI_ManagedIdentityClientId.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack