{"id":705,"date":"2020-09-16T14:46:34","date_gmt":"2020-09-16T13:46:34","guid":{"rendered":"https:\/\/wp.bizoir.dk\/?p=705"},"modified":"2020-10-11T18:06:26","modified_gmt":"2020-10-11T17:06:26","slug":"authenticating-to-azure-with-azcli-og-az-powershell-module","status":"publish","type":"post","link":"https:\/\/wp.bizoir.dk\/?p=705","title":{"rendered":"Authenticating to Azure with AzCli og the Az Powershell module"},"content":{"rendered":"

When you only have access to one Azure directory, AzCLI and the Az Powershell module can figure out the Authentication itself, but if you have access to multiple directories on one user, you have to be more specific – especially if one of the directories uses MFA.
\nThe typical “Get started<\/a>” introductions does not cover this.<\/p>\n

I have not tried it with multiple directories all requiring (different) MFA…<\/p>\n

<\/p>\n

AzCLI:<\/h2>\n

Make sure to use “az login” with the tenant parameter for the MFA directory. The tenant guid can be found in several places – among others in the “Show diagnostics” in the Azure portal<\/a><\/p>\n

az login --tenant deadbeef-0000-0000-0000-000000000000<\/pre>\n
The AzCLI tool will remember your login-session for some time.<\/p>\n
The accessible subscriptions can then be listed with:<\/p>\n
az account list --output table<\/pre>\n
and the default subscription can be set with:<\/p>\n
az account set --subscription deadbeef-1111-2222-3333-000000000000<\/pre>\n
Powershell Az module:<\/h2>\n
Import-Module Az\r\n\r\nConnect-AzAccount -Tenant deadbeef-0000-0000-0000-000000000000 -Subscription deadbeef-1111-2222-3333-000000000000<\/pre>\n
When you are connected, Powershell will by default remember your login-session, and you can change subscriptions with<\/p>\n
Set-AzContext -SubscriptionId \"deadbeef-1111-2222-3333-000000000000\"<\/pre>\n
As mentioned here<\/a>, it is in general better to login using a service principal (like for a CI agent or unattended runs), but you might not always have the possibility to get a SP.<\/p>\n
You can see how to create a new service principal here
\nhttps:\/\/docs.microsoft.com\/en-us\/cli\/azure\/create-an-azure-service-principal-azure-cli?view=azure-cli-latest<\/a>
\nand how to login using it here
\nhttps:\/\/docs.microsoft.com\/en-us\/cli\/azure\/authenticate-azure-cli?view=azure-cli-latest#sign-in-with-a-service-principal<\/a>
\nassign new password to Service Principal
\nhttps:\/\/docs.microsoft.com\/en-us\/cli\/azure\/create-an-azure-service-principal-azure-cli<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
When you only have access to one Azure directory, AzCLI and the Az Powershell module can figure out the Authentication itself, but if you have access to multiple directories on one user, you have to be more specific – especially if one of the directories uses MFA. The typical “Get started” introductions does not cover … Continue reading “Authenticating to Azure with AzCli og the Az Powershell module”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[30],"class_list":["post-705","post","type-post","status-publish","format-standard","hentry","category-guides","tag-azure"],"_links":{"self":[{"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=\/wp\/v2\/posts\/705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=705"}],"version-history":[{"count":12,"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=\/wp\/v2\/posts\/705\/revisions"}],"predecessor-version":[{"id":731,"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=\/wp\/v2\/posts\/705\/revisions\/731"}],"wp:attachment":[{"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.bizoir.dk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}