Skip to content

Commit 8702227

Browse files
Add note about required roles for connecting to AzConfig. (#108)
1 parent 8045021 commit 8702227

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

README.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -217,6 +217,10 @@ and currently exposes the format of the file which, as mentioned above, should b
217217
[@useAzureKeyVault="bool"]
218218
type="Microsoft.Configuration.ConfigurationBuilders.AzureAppConfigurationBuilder, Microsoft.Configuration.ConfigurationBuilders.AzureAppConfig" />
219219
```
220+
>:information_source: [NOTE]
221+
>
222+
>When connecting to an Azure App Configuration store, the identity that is being used must be assigned either the `Azure App Configuration Data Reader` role or the `Azure App Configuration Data Owner` role. Otherwise the config builder will encounter a "403 Forbidden" response from Azure and throw an exception if not `optional`.
223+
220224
[AppConfiguration](https://docs.microsoft.com/en-us/azure/azure-app-configuration/overview) is a new offering from Azure, currently in preview. If you
221225
wish to use this new service for managing your configuration, then use this AzureAppConfigurationBuilder. Either `endpoint` or `connectionString` are
222226
required, but all other attributes are optional. If both `endpoint` and `connectionString` are used, then preference is given to the connection string.

0 commit comments

Comments
 (0)