A managed identity in Azure provides an Azure service with a secure access token to access other Azure resources without storing credentials. Assigning roles to a managed identity allows controlled access for the resources it uses. In Elastigroup Stateful Nodes (Azure), you can attach a user-assigned managed identity to a virtual machine using JSON configuration.

1. In the Azure portal, create a user-assigned managed identity:

   • Navigate to Managed Identities.

   • Click Create and fill in the details such as subscription, resource group, region, and name.
      

2. Assign roles to the managed identity:

   • Open the newly created managed identity.

   • Click Azure role assignments.

   • Select Add role assignment, then choose the appropriate role for your use case.
      

3. Configure the managed identity in Elastigroup:

   • Add the user-assigned managed identity in the configuration under:

     statefulNode.compute.launchSpecifications.ManagedServiceIdentity

   • Use the following JSON block as an example:

     "managedServiceIdentities": [
      {
      "name": "my-managed-identity",
      "resourceGroupName": "myResourceGroup" 
      } 
     ],

When the configuration is updated, VMs launched will have the roles attached to the managed identity, enabling granular access to Azure services.

Outcome

After completing these steps, managed identities are successfully linked to your Azure Stateful Nodes in Elastigroup, allowing controlled and secure access to Azure resources.