Establish federated identity credential / required RBAC role

Anonymous

Which Azure RBAC role is required to establish federated identity credential?

Following the error message this action is used.

Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials/write

Unluckily this action is not listed on the Azure RBAC reference page.

Thomas Spear 5 Reputation points

2023-06-29T22:50:37.57+00:00

I have the same question, and the little link I'm supposed to click to indicate that isn't working so I'm adding this comment to help me find this later.

Creating federated identity credentials worked fine a few days ago for us and now its failing.
Rinesh Varghese Kappil 0 Reputation points

2023-10-05T14:35:20.3866667+00:00

It seems Managed Identity Contributor role is needed o perform this action. Reference: https://video2.skills-academy.com/en-us/azure/role-based-access-control/built-in-roles#managed-identity-contributor
Jimmy, Akhil 5 Reputation points

2023-10-06T06:01:45.5966667+00:00

Managed Identity contributor doesn't include Microsoft.ManagedIdentity/userAssignedIdentities/*/write, hence federated credentials can't be created with Managed Identity Contributor, might need to create a custom role or use Contributor role.
Rinesh Varghese Kappil 0 Reputation points

2023-11-27T06:57:11.82+00:00

Either Owner or Contributor role is required. Further details here: https://azure.github.io/azure-workload-identity/docs/faq.html#what-permissions-are-required-to-create-a-federated-identity-credential-for-user-assigned-managed-identity

Your answer