Create Azure Resources
Creation of azure resources can be done with managed-identity.
Enable system-assigned managed identity
-
Sign in to the Azure portal.
-
Navigate to the Virtual Machine > Identity.
-
Under System assigned, Status, select On and then click Save.
Assign a role to a managed identity
-
Select the Access control (IAM).
-
Select + Add role assignment. In the next step, assign the following 3 roles for the identity:
-
Cosmos DB Operator
-
DocumentDB Account Contributor
-
Storage Account Contributor
-
-
In the Add role assignment, configure the following values, and then click Save:
-
Scope: Select the scope.
-
Subscription: Select the subscription.
-
Resource Group: Select the resource group in which you want to create the resources for Discovery
-
Role: Select the role mentioned above.
-