SecurityInsight settings · Settings > Sign-in & Azure resources
User-assigned managed identity
| Key | SI_ManagedIdentityClientId |
|---|---|
| Where | Settings > Sign-in & Azure resources > How SecurityInsight signs in |
| Type | Text |
| Default | Empty: the host's system-assigned identity |
| Edition | Community |
What it does
Client id of a user-assigned managed identity to sign in with when the sign-in method is managed identity.
When set
Selects which managed identity holds the permissions. A wrong client id makes sign-in fail; empty uses the Azure VM's or Arc server's own identity.
When blank or default
Left blank, the default applies: Empty: the host's system-assigned identity
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Only when you sign in with a user-assigned identity instead of the host's system-assigned one.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack