A river-otter holt web app has a managed identity enabled but still cannot list blobs in a container. What else is required?
Select an answer to reveal the explanation.
Short Explanation
Turning on managed identity only creates the badge—you still stamp the badge for Storage (or Key Vault, or Cosmos). Without a data-plane role, list blobs stays a 403.
Full Explanation
Enabling a managed identity creates a principal but grants no rights on target resources until RBAC (or the service’s access model) assigns them. For Blob listing, assign an appropriate data-plane role such as Storage Blob Data Reader to that identity. Removing the identity, relocating data into Application Insights, or embedding account keys in client bundles are incorrect responses.