ManagedIdentity
Azure MI (system/user-assigned) bound to resources.
class: Identity
Realizing resources
azure azure
| resource | scope | enumerate | required permissions |
|---|---|---|---|
azure:managedidentity:userassigned |
global | arg:microsoft.managedidentity/userassignedidentities |
Microsoft.ManagedIdentity/userassignedidentities/read |
As edge source
AttachedToAuthenticatesToCanAddMemberCanAdministerCanAssumeCanAttachIdentityCanControlCanCreateCanCreateCredentialForCanCreateKeyCanCreateWorkloadAsCanDecryptCanDelegateCanDeleteCanDeleteDataCanDeployCanEnterAccountCanEnterOrganizationCanEnterProjectCanEnterSubscriptionCanEnterTenantCanEscalateToCanExecuteAsCanExecuteCommandCanExecuteOnCanExfiltrateCanExportKeyCanFederateAsCanGrantPermissionCanImpersonateCanInvokeCanModifyCanModifyCodeCanModifyConfigurationCanModifyPolicyCanModifyTrustCanNetworkReachCanPassIdentityCanReadCanReadCredentialCanReadDataCanReadSecretCanRemoveMemberCanReplaceCanResetCredentialCanRetrieveTokenCanScheduleCanSignAsCanStartCanTakeOwnershipCanTriggerCanWriteCanWriteDataControlsExposedToAccountExposedToTenantFederatesToHasPermissionHasPolicyHasRoleLocatedInMemberOfTrustsExternalIdentityAs edge target
AttachedToAuthenticatesToCanAdministerCanControlCanCreateCanCreateCredentialForCanCreateWorkloadAsCanDelegateCanDeleteCanEscalateToCanExecuteAsCanGrantPermissionCanImpersonateCanModifyCanModifyConfigurationCanModifyPolicyCanPassIdentityCanReadCanReplaceCanResetCredentialCanRetrieveTokenCanTakeOwnershipCanWriteContainsContainsResourceReferenceControlsCredentialValidForCredentialsForExecutesAsExposesCredentialExternalIdentityMapsToFederatesToHasPermissionExposure sites
aws-acm-exported-private-key-outputaws-amplify-webhook-url-outputaws-apigateway-rest-api-key-valueaws-cloudformation-stack-output-valueaws-cloudhsm-extractable-key-material-data-planeaws-codeartifact-authorization-token-outputaws-codebuild-exported-environment-variable-outputaws-codebuild-webhook-secret-output
Rules that touch ManagedIdentity 76
Assigning a user-assigned MI to an ACR Task requires both tasks/write AND MI assign/action.
azure
CanPassIdentityAttach a user-assigned managed identity to a Data Factory (factories/write + assign/action on the MI), binding a higher-privilege identity to the factory's pipeline runs.
azure
CanAttachIdentityCluster-admin kubeconfig -> exec any pod -> execute as every pod workload identity (cluster-wide summary edge; per-pod edges from container-chains cluster-rbac-exec).
azure
CanExecuteAsNode-level code execution (privileged pod, hostPID, DaemonSet exec) reaches the node IMDS and mints a token for the node system-assigned / kubelet MI.
azure
CanExecuteAsrunCommand grants cluster-wide kubectl exec; any pod's workload identity is reachable by exec-ing into the pod (container-chains cluster-rbac-exec).
azure
CanExecuteAsmanagedClusters/agentPools/write + assign on a target MI allows swapping the kubelet MI, binding all nodes to a more-privileged identity.
azure
CanAttachIdentityAttach a user-assigned MI to an AML compute cluster/instance - future jobs run as the new MI.
azure
CanAttachIdentityAny code running on an AML compute node can mint the compute MI's token from IMDS - the MI credential is exposed to all job code.
azure
ExposesCredentialAny code on an AML compute node can mint a bearer token for the compute MI via IMDS.
azure
CanRetrieveTokenCreate a new AML compute bound to a chosen user-assigned MI, then submit a job to it - execute as that MI.
azure
CanCreateWorkloadAsSubmit a job specifying identity.client_id to override the cluster-default MI with a chosen user-assigned MI for that run.
azure
CanPassIdentityAn attacker who can write an Application Gateway and pass a user-assigned MI can swap the gateway's identity, gaining that MI's Key Vault (and potentially broader) permissions.
azure
CanAttachIdentityPrincipal holds assign/action on a UAMI and deploymentScripts/write - can bind the UAMI to a new or existing deploymentScript, making it the script's execution identity.
azure
CanPassIdentityAttach a user-assigned managed identity to an Automation Account (Azure PassRole analog); subsequent runbooks execute as that MI.
azure
CanAttachIdentityAn Automation Account sandbox job executes as the bound managed identity; any code running in the sandbox can mint MI tokens from IMDS.
azure
ExecutesAsAn Automation Account sandbox job exposes its bound MI's token to any code it runs via the IMDS endpoint.
azure
ExposesCredentialCode executing in an Automation Account sandbox can retrieve a bearer token for the bound MI from IMDS.
azure
CanRetrieveTokenAttach/swap a user-assigned MI on a Databricks Access Connector, giving all workspace clusters access to that MI via IMDS.
azure
CanAttachIdentityA cluster with a bound Access Connector MI leaks that MI's credential to any code running on it via IMDS.
azure
ExposesCredentialAny code on a cluster with a bound MI can mint a bearer token for that MI via IMDS.
azure
CanRetrieveTokenA principal that can CanExecuteAs the pipeline's service-connection identity, where that identity holds ARM Contributor/Owner at subscription scope, gains a foothold in that Azure subscription.
azure
CanEnterSubscriptionReading a secret that is a credential for a more-privileged identity is escalation.
azure
CanEscalateToAttach a user-assigned managed identity to a Logic App (assign/action + workflows/write or sites/write).
azure
CanAttachIdentityPrincipal with full control of the MI ARM object (Managed Identity Contributor / Contributor / Owner at scope) can administer the user-assigned identity resource.
azure
CanAdministerA host with a bound MI exposes that identity's bearer token credential via the IMDS / App Service identity endpoint to any code running inside it.
azure
ExposesCredentialAny code running on a host that has a managed identity bound can obtain a bearer token for that MI from the IMDS (or App Service identity) endpoint with no Entra credential.
azure
CanRetrieveTokenSynthesize an IMDS bearer token node for each host+MI pair where the host executes as the MI.
azure
LocatedInPrincipal with read permission on the MI ARM resource can enumerate its metadata (clientId, principalId, tenantId) - recon aiding IMDS multi-MI token requests.
azure
CanReadAn attacker who can start a stopped host can then retrieve IMDS tokens for its bound MI.
azure
CanRetrieveTokenAn IMDS bearer token minted from a host+MI pair is valid authentication as that MI.
azure
CredentialsForShowing 60. Filter all rules for ManagedIdentity.