Get the signed in account's identity to use with Azure services to connect to Azure Cosmos DB for NoSQL

You can use the local Azure CLI.

• If you prefer, install the Azure CLI to run CLI reference commands.

• Local Azure CLI, see how to install the Azure CLI. If you're running on Windows or macOS, consider running Azure CLI in a Docker container. For more information, see How to run the Azure CLI in a Docker container.

  • Sign in to the Azure CLI by using the az login command. To finish the authentication process, follow the steps displayed in your terminal. For other sign-in options, see Sign in with the Azure CLI.

  • When you're prompted, install the Azure CLI extension on first use. For more information about extensions, see Use extensions with the Azure CLI.

  • Run az version to find the version and dependent libraries that are installed. To upgrade to the latest version, run az upgrade.

• If you choose to use Azure PowerShell locally:
  • Install the latest version of the Az PowerShell module.
  • Connect to your Azure account using the Connect-AzAccount -Environment AzureChinaCloud cmdlet.

1. Get the details for the currently logged-in account using az ad signed-in-user.

   az ad signed-in-user show
   

2. The command outputs a JSON response containing various fields.

   {
     "@odata.context": "<https://microsoftgraph.chinacloudapi.cn/v1.0/$metadata#users/$entity>",
     "businessPhones": [],
     "displayName": "Kai Carter",
     "givenName": "Kai",
     "id": "aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb",
     "jobTitle": "Senior Sales Representative",
     "mail": "<kai@adventure-works.com>",
     "mobilePhone": null,
     "officeLocation": "Redmond",
     "preferredLanguage": null,
     "surname": "Carter",
     "userPrincipalName": "<kai@adventure-works.com>"
   }
   

   Tip

   Record the value of the id field. In this example, that value would be aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb. This value can then be used in various scripts to grant your current account role-based access control permissions to Azure resources.

Use the in-portal panes for Microsoft Entra ID to get details of your currently signed-in user account.

1. Sign in to the Azure portal (https://portal.azure.cn).

2. On the Home pane, locate and select the Microsoft Entra ID option.

   

   Tip

   If this option is not listed, select More services and then search for Microsoft Entra ID using the search term "Entra".

3. Within the Overview pane for the Microsoft Entra ID tenant, select Users inside the Manage section of the service menu.

   

4. In the list of users, select the identity (user) that you want to get more details about.

   

   Note

   This screenshot illustrates an example user named "Kai Carter" with a principal of kai@adventure-works.com.

5. On the details pane for the specific user, observe the value of the Object ID property.

   

   Tip

   Record the value of the Object ID property. In this example, that value would be aaaaaaaa-bbbb-cccc-1111-222222222222. This value can then be used in various scripts to grant your current account role-based access control permissions to Azure resources.

1. Get the details for the currently logged-in account using Get-AzADUser.

   Get-AzADUser -SignedIn | Format-List `
       -Property Id, DisplayName, Mail, UserPrincipalName
   

2. The command outputs a list response containing various fields.

   Id                : aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb
   DisplayName       : Kai Carter
   Mail              : kai@adventure-works.com
   UserPrincipalName : kai@adventure-works.com
   

   Tip

   Record the value of the id field. In this example, that value would be aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb. This value can then be used in various scripts to grant your current account role-based access control permissions to Azure resources.