#azure-cosmos-db

Which Azure Cosmos DB Role Does My App Need?

A practical guide to setting up keyless access to Azure Cosmos DB using managed identities and data plane RBAC. Covers the three key questions for access control: who (managed identity), what (built-in data roles), and where (scope). Explains the critical distinction between control plane and data plane RBAC, walks through assigning the built-in Data Contributor role via Azure CLI, and shows how to use DefaultAzureCredential in the .NET SDK to authenticate without connection strings or secrets.