Managed Identity Authentication
This tool uses the hosting environment's managed identity for programmatic access to your Azure Landing Zone inventory.
Requirements:
- System-assigned managed identity enabled on the container group
- Assigned roles:
- Management Group Reader (at tenant root)
- Reader (at subscriptions level)
- Managed identity granted the required Azure roles
Required Azure roles:
- Management Group Reader at the tenant root
- Reader at the subscription level