Create a User-Managed Identity

The flow below provides a step-by-step guide to create a user-managed identity and assign the required built-in Azure role of Network Contributor.

In order to create a managed identity and assign the Vnet to it, you will need Role-Based Access Control Administrator (Preview) or User Access Admin roles. The user managed identity should be specifically on the scope of the Vnet that you will be using for the Lightbits storage cluster. For advanced users, you can create your own role with the Microsoft.Network/virtualNetworks/join/action permission:

1. Log in to the Azure portal.
2. Go to Managed Identities.
3. Click Create.

4. Fill out the Resource Group, Region, and Name for the User Managed Identity.
5. Click Review and Create.
6. Click Create.
7. Wait for the deployment to finish successfully.
8. Click Go to Resource.
9. Go to Virtual Networks.
10. Click the Vnet that you will be using for the storage cluster.
11. Click Access control (IAM).

12. Click Add (Add Role Assignment).
13. Filter for the Network Contributor role and select the entry.

14. Click Next.
15. Click Managed identity.
16. Click Select Members.
17. Select the User Managed Identity you created in the previous step.

18. Click Select.
19. Click Review.

20. Click Review and Assign.