For the complete documentation index, see llms.txt. This page is also available as Markdown.

Function Apps

Open Unified Identities › Resources, filter Providers to Azure Resource Management › Function App, then select a row to open its details.

Function Apps

Function Apps Details

Details page contains the Risk and Exposure Point of the function app and the Information pane.

You can analyze the object in the Graph by clicking the Graph » button next to the Information title.

Function Apps Details

Information

Information Pane contains Details and Managed Identities tabs.

A Tier 0 or Tier 2 badge on the right of the Information title shows the tier of the function app.

Details

Details tab contains attributes below about the function app.

Attribute
Description

Name

The display name of the function app with tenant suffix

Location

The Azure region where the function app is deployed

Kind

The kind of App Service resource (e.g., functionapp, linux)

State

The current state of the function app (e.g., Running)

Default Host Name

The default hostname assigned to the function app

HTTPS Only

Indicates whether the function app accepts only HTTPS traffic

Tenant

The tenant the function app belongs to

Resource Group

The resource group the function app is associated with

Runtime

When runtime configuration is available, the following attributes are shown in a separate Runtime section.

Attribute
Description

Runtime Stack

The application runtime stack (e.g., DOTNET, NODE)

Runtime Version

The version of the runtime stack

Functions Extension Version

The Azure Functions host extension version (e.g., ~4)

Linux Stack Version

The Linux FX version string

Windows Stack Version

The Windows FX version string

Managed Identities

The Managed Identities tab lists Azure Active Directory service principals (managed identities) assigned to the function app. A managed identity lets the function app authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this function app, so these identities are part of its attack surface.

Attribute
Description

Name

The display name of the managed identity with tenant suffix

Display Name

The display name of the service principal

Type

The service principal type (e.g., ManagedIdentity)

Managed Identities

Last updated

Was this helpful?