Search code examples
azureazure-container-registryazure-appserviceazure-service-principal

Service principle assign to who? ACR or App service?

I have an azure app service that pulls an image from azure ACR and fire up the image to run the application.

I would like the action that the app service pulling the image from ACR by service principle. My question is which resource should I assign the service principal to? The ACR or the web service?

Solution

  • My question is which resource should I assign the service principle to? The ACR or the web service?

    The short answer is the ACR. Actually, the correct understanding is that the service principal should have the permission to pull images from ACR, so you need to assign the permission of the ACR to the service principal.