Azure Maps unable to add user-assigned managed identity - Cannot assign identity to a global account

Question

Azure Maps unable to add user-assigned managed identity - Cannot assign identity to a global account

cbron 6

I created a user-assigned managed identity. But when I try to add it to my Azure Maps Account, the Identity blade is grayed out. Hovering over it displays the message Cannot assign identity to global account. The identity I created is in the same resource group. We are already successfully using this Azure Maps Account for geolocation and time zone data using shared keys. Now we are trying to run the sample code for here to test Search Address Autocomplete. The sample code does not show a way to use it with shared keys, and the documentation seems to imply that search can only be used with AAD identities. I am fine with being able to use shared keys though, if that is possible. AzureIdentity_01

AzureIdentity_02

LeelaRajeshSayana-MSFT 17,871 Reputation points Moderator

2023-04-19T16:02:19.6833333+00:00

Hi @cbron Greetings! Welcome to Microsoft Q&A forums. Thank you for posting the question here.

We apologize for the inconvenience the issue is causing you. We are looking into this and will provide more details on this soon.
cbron 6 Reputation points

2023-04-19T16:57:35.5633333+00:00

Additional information. It turns out that because Azure Maps is non-regional, it is always global. Therefore, an Identity cannot be assigned to it. Therefore, the sample cannot be run using Managed Identities. Catch-22. Hopefully, someone has a solution for this.
LeelaRajeshSayana-MSFT 17,871 Reputation points Moderator

2023-04-20T20:00:07.8833333+00:00

Hi @cbron Greetings! I am following up to see if you got a chance to review the below response. Please let us know if you have any additional questions or need further assistance.

If the response helped, please do click Accept Answer and Yes for the answer provided. Doing so would help other community members with similar issue identify the solution. I highly appreciate your contribution to the community.
IoTGirl 4,126 Reputation points Microsoft Employee Moderator

2023-04-20T21:53:54.29+00:00

@cbron Have you tried the steps at https://techcommunity.microsoft.com/t5/azure-maps-blog/managed-identities-for-azure-maps/ba-p/3666312 ? Clemens has also added a note below regarding extending the expiry time of a token.

Or if your final target is a Web Application maybe https://techcommunity.microsoft.com/t5/azure-maps-blog/azure-maps-web-application-authentication-the-right-way/ba-p/3600082 would be a good option?
Anonymous

2023-04-21T07:15:38.7833333+00:00

When working with Azure Maps, please create an Azure Maps account and select always a region (and do not set it too global). When creating a new Azure Maps account, the region selection only affects your Azure Maps account's account management and metadata capabilities. Basically, you decide that all metadata, logs, and private map data stay in the selected region (the United States or Europe). However, it's important to note that Azure Maps is still a global service, irrespective of the region you select. Then you can assign managed identities, like I have written in this blog: · Managed identities for Azure Maps (microsoft.com) · Azure Maps Authentication and Authorization (microsoft.com)
cbron 6 Reputation points

2023-04-21T20:37:27.1766667+00:00

I figured out my issue here. I am now able to run the sample with Shared Key Authentication. So I no longer need to assign an Identity to my Azure Maps Account.
cbron 6 Reputation points

2023-04-21T20:38:52.5+00:00

Typed this before I saw the answer I accepted.

1 answer

Your answer

LeelaRajeshSayana-MSFT 17,871 Reputation points Moderator

2023-04-19T16:02:19.6833333+00:00

Hi @cbron Greetings! Welcome to Microsoft Q&A forums. Thank you for posting the question here.

We apologize for the inconvenience the issue is causing you. We are looking into this and will provide more details on this soon.
cbron 6 Reputation points

2023-04-19T16:57:35.5633333+00:00

Additional information. It turns out that because Azure Maps is non-regional, it is always global. Therefore, an Identity cannot be assigned to it. Therefore, the sample cannot be run using Managed Identities. Catch-22. Hopefully, someone has a solution for this.
LeelaRajeshSayana-MSFT 17,871 Reputation points Moderator

2023-04-20T20:00:07.8833333+00:00

Hi @cbron Greetings! I am following up to see if you got a chance to review the below response. Please let us know if you have any additional questions or need further assistance.

If the response helped, please do click Accept Answer and Yes for the answer provided. Doing so would help other community members with similar issue identify the solution. I highly appreciate your contribution to the community.
IoTGirl 4,126 Reputation points Microsoft Employee Moderator

2023-04-20T21:53:54.29+00:00

@cbron Have you tried the steps at https://techcommunity.microsoft.com/t5/azure-maps-blog/managed-identities-for-azure-maps/ba-p/3666312 ? Clemens has also added a note below regarding extending the expiry time of a token.

Or if your final target is a Web Application maybe https://techcommunity.microsoft.com/t5/azure-maps-blog/azure-maps-web-application-authentication-the-right-way/ba-p/3600082 would be a good option?
Anonymous

2023-04-21T07:15:38.7833333+00:00

When working with Azure Maps, please create an Azure Maps account and select always a region (and do not set it too global). When creating a new Azure Maps account, the region selection only affects your Azure Maps account's account management and metadata capabilities. Basically, you decide that all metadata, logs, and private map data stay in the selected region (the United States or Europe). However, it's important to note that Azure Maps is still a global service, irrespective of the region you select. Then you can assign managed identities, like I have written in this blog: · Managed identities for Azure Maps (microsoft.com) · Azure Maps Authentication and Authorization (microsoft.com)
cbron 6 Reputation points

2023-04-21T20:37:27.1766667+00:00

I figured out my issue here. I am now able to run the sample with Shared Key Authentication. So I no longer need to assign an Identity to my Azure Maps Account.
cbron 6 Reputation points

2023-04-21T20:38:52.5+00:00

Typed this before I saw the answer I accepted.

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

2 deleted comments

Comments have been turned off. Learn more