A polder-pump log solution has two App Service apps and one ACI group that all need the same Key Vault role. Which managed identity approach fits best?
Select an answer to reveal the explanation.
Short Explanation
Three hosts, one vault role: mint one user-assigned identity, pin it on each App Service and the ACI group, and grant that single principal access. System-assigned would mean three principals to keep in sync.
Full Explanation
User-assigned managed identities are standalone, can be assigned to multiple resources, and survive deletion of any one host—ideal when several compute resources should share one security principal and role assignment. System-assigned identities are per-resource and do not share a single principal without duplicate role grants.