Skip to content

Commit c340916

Browse files
committed
update
1 parent 54f6d21 commit c340916

1 file changed

Lines changed: 35 additions & 30 deletions

File tree

articles/azure-app-configuration/concept-enable-rbac.md

Lines changed: 35 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -60,14 +60,32 @@ Follow these steps to assign App Configuration Data roles to your credential.
6060
3. On the **Members** tab, follow the wizard to select the credential you're granting access to and then select **Next**.
6161
4. Finally, on the **Review + assign** tab, select **Review + assign** to assign the role.
6262

63-
## Cloud-specific audience for Entra ID authentication
63+
## Audience for Entra ID authentication
6464

65-
When using Entra ID and the following Azure App Configuration libraries in clouds other than Azure cloud, Azure Government, and Microsoft Azure operated by 21Vianet, an appropriate Entra ID audience must be configured to enable authentication.
65+
The audience for Microsoft Entra ID authentication defines who is permitted to access a specific resource. It identifies the intended recipient of the security token. App Configuration supports different audiences for different clouds.
66+
67+
### App Configuration audience
68+
69+
For Azure App Configuration in the global Azure cloud, use the following audience:
70+
71+
`https://appconfig.azure.com`
72+
73+
For Azure App Configuration in the national clouds, use the applicable audience specified in the table below:
74+
75+
| **National cloud** | **Audience** |
76+
| ------------------------------------ | ----------------------------------- |
77+
| Azure Government | `https://appconfig.azure.us` |
78+
| Microsoft Azure operated by 21Vianet | `https://appconfig.azure.cn` |
79+
| Bleu | `https://appconfig.sovcloud-api.fr` |
80+
81+
### Configure cloud-specific audience
82+
83+
When using Entra ID to authenticate with Azure App Configuration in clouds other than Azure cloud, Azure Government, and Microsoft Azure operated by 21Vianet, an appropriate Entra ID audience must be configured.
6684

6785
### [.NET](#tab/dotnet)
6886
#### .NET configuration provider
6987

70-
Audience can be configured by utilizing the [ConfigureClientOptions](/dotnet/api/microsoft.extensions.configuration.azureappconfiguration.azureappconfigurationoptions.configureclientoptions#microsoft-extensions-configuration-azureappconfiguration-azureappconfigurationoptions-configureclientoptions(system-action((azure-data-appconfiguration-configurationclientoptions)))) method. Use version **8.2.0** or later of any of the following packages to configure the audience.
88+
If your application uses any of the following packages, audience can be configured by utilizing the [ConfigureClientOptions](/dotnet/api/microsoft.extensions.configuration.azureappconfiguration.azureappconfigurationoptions.configureclientoptions#microsoft-extensions-configuration-azureappconfiguration-azureappconfigurationoptions-configureclientoptions(system-action((azure-data-appconfiguration-configurationclientoptions)))) method. Use version **8.2.0** or later of any of the following packages to configure the audience.
7189
- `Microsoft.Extensions.Configuration.AzureAppConfiguration`
7290
- `Microsoft.Azure.AppConfiguration.AspNetCore`
7391
- `Microsoft.Azure.AppConfiguration.Functions.Worker`
@@ -88,10 +106,8 @@ builder.AddAzureAppConfiguration(o =>
88106

89107
#### Azure SDK for .NET
90108

91-
Audience can be configured by utilizing the following API calls. Use version **1.6.0** or later of the package `Azure.Data.AppConfiguration` to configure the audience.
92-
93-
* The ConfigurationClient constructor [accepts ConfigurationClientOptions](/dotnet/api/azure.data.appconfiguration.configurationclient.-ctor#azure-data-appconfiguration-configurationclient-ctor(system-uri-azure-core-tokencredential-azure-data-appconfiguration-configurationclientoptions))
94-
* ConfigurationClientOptions allows [Audience](/dotnet/api/azure.data.appconfiguration.configurationclientoptions.audience#azure-data-appconfiguration-configurationclientoptions-audience) to be set
109+
If your application uses the following package, audience can be configured in `ConfigurationClientOptions` when constructing the `ConfigurationClient` object. Use version **1.6.0** or later of the following package.
110+
- `Azure.Data.AppConfiguration`
95111

96112
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
97113

@@ -108,7 +124,7 @@ var configurationClient = new ConfigurationClient(
108124
### [Java](#tab/java)
109125
#### Spring configuration provider
110126

111-
Audience can be configured by customizing the `ConfigurationClientBuilder` through the `ConfigurationClientCustomizer` interface, then adding it to the bootstrap registry. Use version **5.22.0** or later of the following packages to configure the audience.
127+
If your application uses any of the following packages, audience can be configured by customizing the `ConfigurationClientBuilder` through the `ConfigurationClientCustomizer` interface, then adding it to the bootstrap registry. Use version **5.22.0** or later of the following packages to configure the audience.
112128
- `spring-cloud-azure-appconfiguration-config`
113129
- `spring-cloud-azure-appconfiguration-config-web`
114130

@@ -157,7 +173,8 @@ public class Application {
157173

158174
#### Azure SDK for Java
159175

160-
Audience can be configured by passing the `audience` option to the `ConfigurationClientBuilder` when building a `ConfigurationClient`. Use version **1.8.0** or later of the package `azure-data-appconfiguration` to configure the audience.
176+
If your application uses the following package, audience can be configured by passing the `audience` option to the `ConfigurationClientBuilder` when building a `ConfigurationClient`. Use version **1.8.0** or later of the following package.
177+
- `azure-data-appconfiguration`
161178

162179
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
163180

@@ -172,7 +189,8 @@ ConfigurationClient configurationClient = new ConfigurationClientBuilder()
172189
### [JavaScript](#tab/javascript)
173190
#### JavaScript configuration provider
174191

175-
Audience can be configured by passing the `clientOptions` with the `audience` property to the `load` function. Use version **1.0.0** or later of the package `@azure/app-configuration-provider` to configure the audience.
192+
If your application uses the following package, audience can be configured by passing the `clientOptions` with the `audience` property to the `load` function. Use version **1.0.0** or later of the following package.
193+
- `@azure/app-configuration-provider`
176194

177195
The following code snippet demonstrates how to load Azure App Configuration in a JavaScript application with a cloud-specific audience.
178196

@@ -186,9 +204,8 @@ const appConfig = await load(myStoreEndpoint, credential, {
186204

187205
#### Azure SDK for JavaScript
188206

189-
**Package**: @azure/app-configuration >= 1.9.0
190-
191-
Audience can be configured by passing the `audience` option to the `AppConfigurationClient` constructor. Use version **1.9.0** or later of the package `@azure/app-configuration` to configure the audience.
207+
If your application uses the following package, audience can be configured by passing the `audience` option to the `AppConfigurationClient` constructor. Use version **1.9.0** or later of the following package.
208+
- `@azure/app-configuration`
192209

193210
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
194211

@@ -200,7 +217,7 @@ const client = new AppConfigurationClient(myStoreEndpoint, new DefaultAzureCrede
200217

201218
### [Go](#tab/go)
202219

203-
To customize Entra ID audience, import the following packages in your Go application:
220+
To configure the Entra ID audience, import the following packages in your Go application first:
204221

205222
```golang
206223
import (
@@ -211,7 +228,8 @@ import (
211228

212229
#### Go configuration provider
213230

214-
Audience can be configured by passing the `ClientOptions` with the cloud configuration to the `Load` function. Use version **1.0.0** or later of the package `azureappconfiguration` to configure the audience.
231+
If your application uses the following package, audience can be configured by passing the `ClientOptions` with the cloud configuration to the `Load` function. Use version **1.0.0** or later of the following package.
232+
- `azureappconfiguration`
215233

216234
The following code snippet demonstrates how to load Azure App Configuration in a Go application with a cloud-specific audience.
217235

@@ -244,7 +262,8 @@ appConfig, _ := azureappconfiguration.Load(context.Background(), authOptions, op
244262

245263
#### Azure SDK for Go
246264

247-
Audience can be configured by utilizing the cloud configuration. Use version **2.1.0** or later of the package `azappconfig` to configure the audience.
265+
If your application uses the following package, audience can be configured by utilizing the cloud configuration. Use version **2.1.0** or later of the following package.
266+
- `azappconfig`
248267

249268
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
250269

@@ -270,19 +289,5 @@ client, _ := azappconfig.NewClient(myStoreEndpoint, credential, clientOptions)
270289

271290
---
272291

273-
### Audience
274-
275-
For Azure App Configuration in the global Azure cloud, use the following audience:
276-
277-
`https://appconfig.azure.com`
278-
279-
For Azure App Configuration in the national clouds, use the applicable audience specified in the table below:
280-
281-
| **National cloud** | **Audience** |
282-
| ------------------------------------ | ----------------------------------- |
283-
| Azure Government | `https://appconfig.azure.us` |
284-
| Microsoft Azure operated by 21Vianet | `https://appconfig.azure.cn` |
285-
| Bleu | `https://appconfig.sovcloud-api.fr` |
286-
287292
## Next steps
288293
Learn how to [use managed identities to access your App Configuration store](howto-integrate-azure-managed-service-identity.md).

0 commit comments

Comments
 (0)