Configure managed identity for the DuploCloud Portal in Azure.
Managed Identity (MI) in Azure allows DuploCloud to authenticate securely to Azure services without managing credentials. DuploCloud requires the VM where it is installed to have owner access to the Azure subscription to launch and manage Azure resources effectively. To enable this, configure a MI in Azure for DuploCloud.
Log in to the Azure Portal.
Navigate to Managed Identities.
Click on + Add to create a new managed identity.
Fill the fields:
Click Create and wait for the deployment to complete.
Go to Virtual Machines in the Azure portal and select the VM where DuploCloud is installed.
Under the Security section, select Identity.
Select the User assigned tab and click + Add.
Go to Subscriptions in the Azure portal, and select the subscription where resources will be launched by DuploCloud.
Under Access Control (IAM), click + Add -> Add role assignment.
Select the Privileged administrator roles tab
Go to Subscriptions in the Azure portal.
Select the subscription where resources will be launched by DuploCloud.
Under Access Control (IAM), click + Add -> Add role assignment.
Ensure that both the managed identity and the VM are in the same subscription where resources will be launched.
Verify the assignments under Access Control (IAM) for both the managed identity and the VM to ensure correct configurations.
Select the managed identity created in Step 1, and click Add.
In the Assign access to field, choose Managed identity.
Search for and select the managed identity created in Step 1.
Click Save to complete the role assignment.
Select Owner in the Role list box.
In the Assign access to field, choose Managed Identity.
Search for and select the DuploCloud VM.
Click Save to apply the changes.
Name
Enter a meaningful name for the managed identity (e.g., duplo-master-managed-identity).
Subscription
Select the subscription where the identity will be created.
Resource Group
Choose an existing resource group or create a new one.
Region
Select the appropriate region for the managed identity
