How to find or enable the Managed Identity of ADLS Gen2 storage account. And how to share it for secure access.

Question

How to find or enable the Managed Identity of ADLS Gen2 storage account. And how to share it for secure access.

Amit Puthenpura (Wipro Ltd) 40 Microsoft External Staff

How to find or enable the 'Managed Identity' of an ADLS Gen2 storage account. And how to share it for secure access.

0 comments

1 answer

Your answer

Answer 1

Anonymous

Hi @Amit Puthenpura (Wipro Ltd)

It sounds like you're looking to find or enable the Managed Identity of your Azure Data Lake Storage (ADLS) Gen2 account and share it for secure access. Here's how you can do that:

Finding or Enabling Managed Identity

Navigate to Azure Portal: Go to the Azure Portal.
Access Your Storage Account: Find and select your ADLS Gen2 storage account.
Enable Managed Identity:
- In the left pane, select Identity under the Settings category.
  - Choose either System assigned to enable a system-assigned identity or User assigned if you prefer to create a user-assigned identity.
    - For system-assigned, click on the Status toggle to set it to On and then save the changes.

To give access to your Managed Identity:

Go to Access Control (IAM):
- Within your storage account settings, select Access Control (IAM) from the left navigation menu.
1. Add Role Assignment:
  - Click on Add role assignment.
    - Under Role, choose Storage Blob Data Contributor or Storage Blob Data Owner, depending on the level of access required.
      - For Members, select Managed identity and choose the identity you just created or enabled from the available list.
        
        Finally, review the settings and click Review + Assign to confirm.

This way, you'll have securely shared your Managed Identity for access to the ADLS Gen2 storage.

References

For more detailed instructions, you can check out the following documentation:

Hope this helps! Let me know if you have any more questions.

Anonymous

2026-01-14T16:47:37.4966667+00:00

Hi @Amit Puthenpura (Wipro Ltd)

I hope you had a chance to review the information shared earlier, and I hope this information has been helpful! If you still have questions, please let us know what is needed in the comments so the question can be answered.
Anonymous

2026-01-15T15:12:38.22+00:00
Hi @Amit Puthenpura (Wipro Ltd)

Thank you for the screenshot shared over MS Teams channel — it actually confirms the root cause. Storage Accounts do not have a Managed Identity of their own, so the Identity option will never appear under the Storage Account settings. This is expected behavior.

A Managed Identity is only available on compute services (Azure Functions, Synapse, ADF, VM, App Service, etc.). To access ADLS using MI, follow these steps:

Step 1 — Enable MI on the compute resource

Open your Function/ADF/Synapse/VM

Go to Identity

Turn System‑Assigned = On and note the Object ID

Step 2 — Grant this MI access to ADLS (Storage Account IAM)

Open your Storage Account

Go to Access Control (IAM)

Add role assignment → choose Storage Blob Data Contributor / Owner

Select the compute resource’s managed identity

Step 3 — Set ADLS Gen2 ACLs

Open Storage Explorer

Go to the container → Access Control (ACL)

Add the same Object ID and assign Read/Write/Execute as needed

This is the correct and Microsoft‑recommended way to use Managed Identity with ADLS Gen2.
Anonymous

2026-01-16T18:42:36.3033333+00:00

Hi @Amit Puthenpura (Wipro Ltd)

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.

Share via

How to find or enable the Managed Identity of ADLS Gen2 storage account. And how to share it for secure access.

1 answer

Finding or Enabling Managed Identity

Sharing the Managed Identity for Secure Access

References

Your answer