StrategyOnAzure will be updating the authentication method from access token to service principal.
According to Microsoft, "an Azure service principal is an identity created for use with applications, hosted services, and automated tools to access Azure resources. This access is restricted by the roles assigned to the service principal, giving you control over which resources can be accessed and at which level. For security reasons, it's always recommended to use service principals with automated tools rather than allowing them to log in with a user identity."
This update will let users control the access provided to Strategy Cloud Platform. Users can either provide access to service principal at the subscription level or resource group level. For new deployments, by default, the access level will be set to resource group level, where a user can either provide an existing resource group name or create a new one during the subscription configuration. With resource group level configuration, all the resources of new environments will be deployed in the given resource group.
For subscription level access, service principal will be given access to the entire subscription and a new resource group with the name, “env-XXXX,” will be created for each deployment. For existing environments, Strategy Cloud Console requires access to service principal at the subscription level to communicate with the environments to perform actions like start, reboot, and terminate from Strategy Cloud Platform.
