platform-identity-azure

Type: decision

Decision

The platform uses an app registration rather than a managed identity.

Why

The platform has no subscription to host a managed identity.

Violations

• Platform app registration shared with non-platform workloads.

Links

• platform-identity-graph — Assigning Graph roles to landing zone identities requires the app registration to hold write-level Graph permissions.

← Back to knowledge graph