{"id":1010,"date":"2021-01-12T09:26:06","date_gmt":"2021-01-12T09:26:06","guid":{"rendered":"https:\/\/www.mainmind.com\/blog\/?p=1010"},"modified":"2021-01-12T09:47:23","modified_gmt":"2021-01-12T09:47:23","slug":"principalid-webapp-azure","status":"publish","type":"post","link":"https:\/\/www.mainmind.com\/blog\/principalid-webapp-azure\/","title":{"rendered":"PrincipalId webapp Azure"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">El acceso a propiedades de objeto <em>Identity <\/em>desde l\u00ednea de comandos en PowerShell para Azure <a href=\"https:\/\/github.com\/MicrosoftDocs\/azure-docs\/issues\/44391\" data-type=\"URL\" data-id=\"https:\/\/github.com\/MicrosoftDocs\/azure-docs\/issues\/44391\" target=\"_blank\" rel=\"noreferrer noopener\">deber\u00eda obtenerse mediante<\/a>:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: powershell; title: ; notranslate\" title=\"\">\nGet-AzWebApp -ResourceGroupName &quot;NombreDeRecursos&quot; -Name &quot;NombreAplicacionWeb&quot;\n--$appId=(Get-AzWebApp -ResourceGroupName $resourcegroupname -Name $webappname).Identity.PrincipalId\n--$appId=(Get-AzureRmWebApp $resourcegroupname -Name $webappname).Identity.PrincipalId\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">No tenemos acceso a estos identificadores, podemos utilizar en su lugar el acceso mediante <a href=\"https:\/\/docs.microsoft.com\/es-es\/azure\/active-directory\/managed-identities-azure-resources\/overview\" data-type=\"URL\" data-id=\"https:\/\/docs.microsoft.com\/es-es\/azure\/active-directory\/managed-identities-azure-resources\/overview\" target=\"_blank\" rel=\"noreferrer noopener\">Service Managed Identity<\/a>:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: powershell; title: ; notranslate\" title=\"\">\naz webapp identity assign -g $resourcegroupname -n $webappname \n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">Del que obtendremos el identificador necesario:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\n{- Finished ..\n  &quot;principalId&quot;: &quot;b1dd98c4-eae0-4fea-8e46-efzs563dc9630&quot;,\n  &quot;tenantId&quot;: &quot;504c8804-c8a6-9090-8fzs-e35841104187&quot;,\n  &quot;type&quot;: &quot;SystemAssigned&quot;,\n  &quot;userAssignedIdentities&quot;: null\n}\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">Con la administraci\u00f3n de identidades administradas habilitadas y permitiendo al acceso a los recursos a la aplicaci\u00f3n, ya podemos utilizar tokens de acceso Oauth. De este modo <a rel=\"noreferrer noopener\" href=\"https:\/\/docs.microsoft.com\/es-es\/dotnet\/api\/overview\/azure\/service-to-service-authentication\" data-type=\"URL\" data-id=\"https:\/\/docs.microsoft.com\/es-es\/dotnet\/api\/overview\/azure\/service-to-service-authentication\" target=\"_blank\">solo se puede acceder a este extremo desde el c\u00f3digo<\/a> que se ejecuta en el servicio de la aplicaci\u00f3n, por ejemplo, solo nuestro sitio web puede obtener tokens de acceso.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>El acceso a propiedades de objeto Identity desde l\u00ednea de comandos en PowerShell para Azure deber\u00eda obtenerse mediante: No tenemos acceso a estos identificadores, podemos utilizar en su lugar el acceso mediante Service Managed Identity: Del que obtendremos el identificador necesario: Con la administraci\u00f3n de identidades administradas habilitadas y permitiendo al acceso a los recursos [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1013,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[155,701,697,700,698,699,123,695,696],"class_list":["post-1010","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-visual-studio","tag-azure","tag-azure-ad","tag-azure-cli","tag-keyvault","tag-managed-identity","tag-oauth","tag-powershell","tag-principalid","tag-webapp"],"_links":{"self":[{"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/posts\/1010","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/comments?post=1010"}],"version-history":[{"count":0,"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/posts\/1010\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/media\/1013"}],"wp:attachment":[{"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/media?parent=1010"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/categories?post=1010"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mainmind.com\/blog\/wp-json\/wp\/v2\/tags?post=1010"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}