Azure App Service keyVaultReferenceIdentity Must Be Set via ARM, Not Portal
Azure App Service has a known configuration limitation where the keyVaultReferenceIdentity property is hidden from the Azure Portal and only accessible at the Azure Resource Manager (ARM) level. Developers relying on Managed Identity to retrieve Key Vault secrets often encounter empty values because this property is not set through standard portal interfaces. Microsoft intentionally keeps this setting out of the portal UI to reduce misconfiguration risks and enforce proper change management through ARM. The fix requires using Azure CLI or PowerShell to send a PATCH request directly to the ARM API, specifying the User-Assigned Managed Identity resource URL. Prerequisites include an active Azure subscription, a configured App Service, a pre-created User-Assigned Managed Identity, and appropriate RBAC permissions such as Contributor or Owner on the App Service resource.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in