ARM Deployments with other Principal than Account Principal

This article applies to: EvOps version 1.1910.1755 or higher.

Sometimes there is a need to deploy ARM templates in workflows with a separate service principal than the EvOps account service principal. This is now a configurable option on the ARM Deployment activity.

Prerequisite for being able to select it in the list, is that it has been added to the EvOps account. You can add service principals to an EvOps account in the Security menu and click +Add.

It is possible to add both service principals with a certificate for authentication, as well as authentication using secrets. If you are using certificate authentication you need to specify Application ID, select a PFX certificate file, and select a file password.

If you are using a secret for authentication you need to specify Application ID, secret, and the date when the secret expires.