AZURE SERVICE PRINCIPAL
Stores an Azure service principal used to authenticate against Azure services.
AZURE SERVICE PRINCIPAL is the second entry in the Secret Type dropdown and it's available at all three scopes: User, Workspace and Tenant. A service principal is the identity Azure expects an application to authenticate as, distinct from the user account somebody signs in with interactively, and it's what we use to reach ADLS Gen2 storage and the other Azure services a workload depends on.
The four required fields identify the directory, the application and the secret that proves the application is what it claims to be.
We validate all four together, because three correct values and one wrong one fail identically at runtime.
Basic Details
Common to every secret type:
| Field | Required | Control | Placeholder / default |
|---|---|---|---|
| Secret Name | Yes | text | title_example_user_secret_1 |
| Secret Type | Yes | dropdown | select AZURE SERVICE PRINCIPAL |
| Workspace | Yes | dropdown | Workspace scope only |
| Description | No | textarea | Enter Description |
Secret Details
| Field | Required | Control | Placeholder |
|---|---|---|---|
| Client ID | Yes | text | c8b87a2f-41de-4b66-b0d1-9f7cd28fb3c1 |
| Tenant ID | Yes | text | f52d3c1a-9dd8-4a8b-913e-0e27b795ac4a |
| Client Secret | Yes | password | (none) |
| Subscription ID | Yes | text | 7a94c28e-6c32-4ef2-912f-4fcd528918ef |
A secret does not carry a storage target. Settings ▸ Credentials ▸ Azure Service Principal is a different form with six fields: these four plus Storage Account Name and Container Name.
Validate and Metastore
- Validate is available for this type, and stays disabled until the four required fields are filled.
- This type does not expose the Metastore dropdown.
