`az managedapp create` command does not provide an option to control the identity

[jimdigriz]

Related command

az managedapp create ...

Is your feature request related to a problem? Please describe.
Similar to issue #21274, there is also no way to set the identity of the managed application to be deployed without manually preparing an ARM template.

Describe the solution you'd like
Deploying a managed application with only a SystemAssigned identity:

az managedapp create ... --identity-system

Deploying a managed application with only one or more UserAssigned identities:

az managedapp create ... --identity-user /subscription/... /subscription/....

Deploying a managed application with both system an user assigned identities:

az managedapp create ... --identity-system --identity-user /subscription/... /subscription/....

Describe alternatives you've considered
Using a regular ARM template with only the resource Microsoft.Solutions/applications:

az deployment group create ...

Additional context
Running version azure-cli 2.62.

[yonzhan]

Thank you for opening this issue, we will look into it.

[torreymicrosoft]

Thanks for your patience, and apologies for the long wait here — this was recently picked up as an outstanding open issue for the ARM Deployments team to review.

Confirming the gap on current Azure CLI (2.85.0): az managedapp create still has no argument for the managed application's identity, so a SystemAssigned or UserAssigned identity can only be set today by deploying the Microsoft.Solutions/applications resource via a template (as you noted, same shape as the related #21274).

That's a reasonable enhancement, but az managedapp sits with the Managed Applications team rather than ARM Deployments, so we're routing it their way to consider adding identity arguments.

In the meantime, the supported workaround is exactly the template route you mentioned — az deployment group create with an identity block on the Microsoft.Solutions/applications resource.

To help scope the request for that team: is your primary need SystemAssigned, UserAssigned, or both? Thanks for flagging it.