Use managed identities for Azure Load Testing

To set up a managed identity in the portal, you first create an Azure load testing resource and then enable the feature.

1. In the Azure portal, go to your Azure load testing resource.

2. On the left pane, select Identity.

3. In the System assigned tab, switch Status to On, and then select Save.

   

4. On the confirmation window, select Yes to confirm the assignment of the managed identity.

5. After this operation completes, the page shows the Object ID of the managed identity, and lets you assign permissions to it.

   

Run the az load update command with --identity-type SystemAssigned to add a system-assigned identity to your load testing resource:

az load update --name <load-testing-resource-name> --resource-group <group-name> --identity-type SystemAssigned

You can use an ARM template to automate the deployment of your Azure resources. For more information about using ARM templates with Azure Load Testing, see the Azure Load Testing ARM reference documentation.

You can assign a system-assigned managed identity when you create a resource of type Microsoft.LoadTestService/loadtests. Configure the identity property with the SystemAssigned value in the resource definition:

"identity": {
    "type": "SystemAssigned"
}

By adding the system-assigned identity type, you're telling Azure to create and manage the identity for your resource. For example, an Azure load testing resource might look like the following:

{
    "type": "Microsoft.LoadTestService/loadtests",
    "apiVersion": "2021-09-01-preview",
    "name": "[parameters('name')]",
    "location": "[parameters('location')]",
    "tags": "[parameters('tags')]",
    "identity": {
        "type": "SystemAssigned"
    }
}

After the resource creation finishes, the following properties are configured for the resource:

"identity": {
    "type": "SystemAssigned",
    "tenantId": "00000000-0000-0000-0000-000000000000",
    "principalId": "00000000-0000-0000-0000-000000000000"
}

The tenantId property identifies which Microsoft Entra tenant the managed identity belongs to. The principalId is a unique identifier for the resource's new identity. Within Microsoft Entra ID, the service principal has the same name as the Azure load testing resource.

1. Create a user-assigned managed identity by following the instructions mentioned in Create a user-assigned managed identity.

   

2. In the Azure portal, go to your Azure load testing resource.

3. On the left pane, select Identity.

4. Select the User assigned tab, and select Add.

5. Search and select the managed identity you created previously. Then, select Add to add it to the Azure load testing resource.

   

1. Create a user-assigned identity.

   az identity create --resource-group <group-name> --name <identity-name>
   

2. Run the az load update command with --identity-type UserAssigned to add a user-assigned identity to your load testing resource:

   az load update --name <load-testing-resource-name> --resource-group <group-name> --identity-type UserAssigned --user-assigned <identity-id>
   

You can create an Azure load testing resource by using an ARM template and the resource type Microsoft.LoadTestService/loadtests. For more information about using ARM templates with Azure Load Testing, see the Azure Load Testing ARM reference documentation.

1. Create a user-assigned managed identity by following the instructions mentioned in Create a user-assigned managed identity.

2. Specify the user-assigned managed identity in the identity section of the resource definition.

   Replace the <RESOURCEID> text placeholder with the resource ID of your user-assigned identity:

   "identity": {
       "type": "UserAssigned",
       "userAssignedIdentities": {
           "<RESOURCEID>": {}
       }
   }
   

   The following code snippet shows an example of an Azure Load Testing ARM resource definition with a user-assigned identity:

   {
       "type": "Microsoft.LoadTestService/loadtests",
       "apiVersion": "2021-09-01-preview",
       "name": "[parameters('name')]",
       "location": "[parameters('location')]",
       "tags": "[parameters('tags')]",
       "identity": {
           "type": "UserAssigned",
           "userAssignedIdentities": {
               "<RESOURCEID>": {}
           }
   }
   

   After the Load Testing resource is created, Azure provides the principalId and clientId properties in the output:

   "identity": {
       "type": "UserAssigned",
       "userAssignedIdentities": {
           "<RESOURCEID>": {
               "principalId": "00000000-0000-0000-0000-000000000000",
               "clientId": "00000000-0000-0000-0000-000000000000"
           }
       }
   }
   

   The principalId is a unique identifier for the identity that's used for Microsoft Entra administration. The clientId is a unique identifier for the resource's new identity that's used for specifying which identity to use during runtime calls.