Public preview: User-assigned Managed Identity support for Azure Monitor Agent

Azure Monitor Agent (AMA) replaces Log Analytics agents and provides a secure, cost-effective, simplified, and performant way to collect telemetry data from Azure Virtual Machines, Virtual Machine Scale Sets, Arc-enabled servers, and Windows client devices. Today we are announcing public preview support for installation and authentication of AMA extension at-scale using Managed Identity user-assigned mode. You can use the built-in policies and initiatives to deploy the agent extension across virtual machines and scale sets.

User-assigned identity is more scalable and resilient compared to system assigned identity. It is the recommended way for at-scale installation using agent extension on Azure Virtual Machines and Virtual Machine Scale Sets. 

Note: For deployment on Arc-enabled servers, you can continue using system assigned managed identity.

Learn more:

• Built in policies and initiatives to install the agent
• Migrating from legacy Log Analytics agent