An urchin-barren plot site must let a visitor’s browser upload one photo to Blob Storage. A teammate tries enabling managed identity on the user’s laptop. What is the correct approach?
Select an answer to reveal the explanation.
Short Explanation
Managed identity rides Azure hosts—not home laptops. Browsers get a short-lived SAS (often user-delegation). Graph is for directory and Microsoft 365, not Blob photo dumps.
Full Explanation
Managed identities apply to Azure resources such as App Service or Functions, not end-user devices. For anonymous or browser-based Blob uploads, issue a shared access signature or user-delegation SAS with limited permissions and lifetime. Microsoft Graph permissions do not replace storage SAS for Blob uploads, and embedding account keys in the browser is unsafe.