You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-app-configuration/concept-enable-rbac.md
+35-30Lines changed: 35 additions & 30 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -60,14 +60,32 @@ Follow these steps to assign App Configuration Data roles to your credential.
60
60
3. On the **Members** tab, follow the wizard to select the credential you're granting access to and then select **Next**.
61
61
4. Finally, on the **Review + assign** tab, select **Review + assign** to assign the role.
62
62
63
-
## Cloud-specific audience for Entra ID authentication
63
+
## Audience for Entra ID authentication
64
64
65
-
When using Entra ID and the following Azure App Configuration libraries in clouds other than Azure cloud, Azure Government, and Microsoft Azure operated by 21Vianet, an appropriate Entra ID audience must be configured to enable authentication.
65
+
The audience for Microsoft Entra ID authentication defines who is permitted to access a specific resource. It identifies the intended recipient of the security token. App Configuration supports different audiences for different clouds.
66
+
67
+
### App Configuration audience
68
+
69
+
For Azure App Configuration in the global Azure cloud, use the following audience:
70
+
71
+
`https://appconfig.azure.com`
72
+
73
+
For Azure App Configuration in the national clouds, use the applicable audience specified in the table below:
| Microsoft Azure operated by 21Vianet |`https://appconfig.azure.cn`|
79
+
| Bleu |`https://appconfig.sovcloud-api.fr`|
80
+
81
+
### Configure cloud-specific audience
82
+
83
+
When using Entra ID to authenticate with Azure App Configuration in clouds other than Azure cloud, Azure Government, and Microsoft Azure operated by 21Vianet, an appropriate Entra ID audience must be configured.
66
84
67
85
### [.NET](#tab/dotnet)
68
86
#### .NET configuration provider
69
87
70
-
Audience can be configured by utilizing the [ConfigureClientOptions](/dotnet/api/microsoft.extensions.configuration.azureappconfiguration.azureappconfigurationoptions.configureclientoptions#microsoft-extensions-configuration-azureappconfiguration-azureappconfigurationoptions-configureclientoptions(system-action((azure-data-appconfiguration-configurationclientoptions)))) method. Use version **8.2.0** or later of any of the following packages to configure the audience.
88
+
If your application uses any of the following packages, audience can be configured by utilizing the [ConfigureClientOptions](/dotnet/api/microsoft.extensions.configuration.azureappconfiguration.azureappconfigurationoptions.configureclientoptions#microsoft-extensions-configuration-azureappconfiguration-azureappconfigurationoptions-configureclientoptions(system-action((azure-data-appconfiguration-configurationclientoptions)))) method. Use version **8.2.0** or later of any of the following packages to configure the audience.
Audience can be configured by utilizing the following API calls. Use version **1.6.0** or later of the package `Azure.Data.AppConfiguration` to configure the audience.
92
-
93
-
* The ConfigurationClient constructor [accepts ConfigurationClientOptions](/dotnet/api/azure.data.appconfiguration.configurationclient.-ctor#azure-data-appconfiguration-configurationclient-ctor(system-uri-azure-core-tokencredential-azure-data-appconfiguration-configurationclientoptions))
94
-
* ConfigurationClientOptions allows [Audience](/dotnet/api/azure.data.appconfiguration.configurationclientoptions.audience#azure-data-appconfiguration-configurationclientoptions-audience) to be set
109
+
If your application uses the following package, audience can be configured in `ConfigurationClientOptions` when constructing the `ConfigurationClient` object. Use version **1.6.0** or later of the following package.
110
+
-`Azure.Data.AppConfiguration`
95
111
96
112
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
97
113
@@ -108,7 +124,7 @@ var configurationClient = new ConfigurationClient(
108
124
### [Java](#tab/java)
109
125
#### Spring configuration provider
110
126
111
-
Audience can be configured by customizing the `ConfigurationClientBuilder` through the `ConfigurationClientCustomizer` interface, then adding it to the bootstrap registry. Use version **5.22.0** or later of the following packages to configure the audience.
127
+
If your application uses any of the following packages, audience can be configured by customizing the `ConfigurationClientBuilder` through the `ConfigurationClientCustomizer` interface, then adding it to the bootstrap registry. Use version **5.22.0** or later of the following packages to configure the audience.
112
128
-`spring-cloud-azure-appconfiguration-config`
113
129
-`spring-cloud-azure-appconfiguration-config-web`
114
130
@@ -157,7 +173,8 @@ public class Application {
157
173
158
174
#### Azure SDK for Java
159
175
160
-
Audience can be configured by passing the `audience` option to the `ConfigurationClientBuilder` when building a `ConfigurationClient`. Use version **1.8.0** or later of the package `azure-data-appconfiguration` to configure the audience.
176
+
If your application uses the following package, audience can be configured by passing the `audience` option to the `ConfigurationClientBuilder` when building a `ConfigurationClient`. Use version **1.8.0** or later of the following package.
177
+
-`azure-data-appconfiguration`
161
178
162
179
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
163
180
@@ -172,7 +189,8 @@ ConfigurationClient configurationClient = new ConfigurationClientBuilder()
172
189
### [JavaScript](#tab/javascript)
173
190
#### JavaScript configuration provider
174
191
175
-
Audience can be configured by passing the `clientOptions` with the `audience` property to the `load` function. Use version **1.0.0** or later of the package `@azure/app-configuration-provider` to configure the audience.
192
+
If your application uses the following package, audience can be configured by passing the `clientOptions` with the `audience` property to the `load` function. Use version **1.0.0** or later of the following package.
193
+
-`@azure/app-configuration-provider`
176
194
177
195
The following code snippet demonstrates how to load Azure App Configuration in a JavaScript application with a cloud-specific audience.
Audience can be configured by passing the `audience` option to the `AppConfigurationClient` constructor. Use version **1.9.0** or later of the package `@azure/app-configuration` to configure the audience.
207
+
If your application uses the following package, audience can be configured by passing the `audience` option to the `AppConfigurationClient` constructor. Use version **1.9.0** or later of the following package.
208
+
-`@azure/app-configuration`
192
209
193
210
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
194
211
@@ -200,7 +217,7 @@ const client = new AppConfigurationClient(myStoreEndpoint, new DefaultAzureCrede
200
217
201
218
### [Go](#tab/go)
202
219
203
-
To customize Entra ID audience, import the following packages in your Go application:
220
+
To configure the Entra ID audience, import the following packages in your Go application first:
204
221
205
222
```golang
206
223
import (
@@ -211,7 +228,8 @@ import (
211
228
212
229
#### Go configuration provider
213
230
214
-
Audience can be configured by passing the `ClientOptions` with the cloud configuration to the `Load` function. Use version **1.0.0** or later of the package `azureappconfiguration` to configure the audience.
231
+
If your application uses the following package, audience can be configured by passing the `ClientOptions` with the cloud configuration to the `Load` function. Use version **1.0.0** or later of the following package.
232
+
-`azureappconfiguration`
215
233
216
234
The following code snippet demonstrates how to load Azure App Configuration in a Go application with a cloud-specific audience.
217
235
@@ -244,7 +262,8 @@ appConfig, _ := azureappconfiguration.Load(context.Background(), authOptions, op
244
262
245
263
#### Azure SDK for Go
246
264
247
-
Audience can be configured by utilizing the cloud configuration. Use version **2.1.0** or later of the package `azappconfig` to configure the audience.
265
+
If your application uses the following package, audience can be configured by utilizing the cloud configuration. Use version **2.1.0** or later of the following package.
266
+
-`azappconfig`
248
267
249
268
The following code snippet demonstrates how to instantiate a configuration client with a cloud-specific audience.
0 commit comments