> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/azure-identities/azure-resource-management/user-assigned-identities.md).

# User Assigned Identities

Open **Unified Identities › Non Human Identities**, filter **Providers** to **Azure Resource Management › User Assigned Identity**, then select a row to open its details. A user-assigned identity is a standalone managed identity that Azure resources can run as.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-6a1597489476803ea1aa4455885631da1fde30b4%2Fuser_assigned_identity_list.PNG?alt=media" alt=""><figcaption><p>User Assigned Identities</p></figcaption></figure>

#### User Assigned Identities Details

Details page contains the `Risk` and `Exposure Point` of the user-assigned identity and the `Information` pane.

{% hint style="info" %}
You can analyze the object in the [Graph](/forestall/visualize/visualize.md) by clicking the **Graph »** button next to the `Information` title.
{% endhint %}

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-0c8231f4588d9efa4346273947600a07e378b53c%2Fuser_assigned_identity_details.PNG?alt=media" alt=""><figcaption><p>User Assigned Identities Details</p></figcaption></figure>

#### Information

`Information Pane` contains `Details`.

A `Tier 0` or `Tier 2` badge on the right of the `Information` title shows the tier of the user-assigned identity.

#### Details

Details tab contains attributes below about the AZ user-assigned identity.

| Attribute                 | Description                                                                 |
| ------------------------- | --------------------------------------------------------------------------- |
| Name                      | The display name of the user-assigned identity with tenant suffix           |
| Location                  | The Azure region where the user-assigned identity is deployed               |
| Principal ID              | The object ID of the service principal in Entra ID that backs this identity |
| Client ID                 | The client (application) ID associated with this identity                   |
| Tenant                    | The tenant the user-assigned identity belongs to                            |
| Resource Group            | The resource group the user-assigned identity is associated with            |
| Backing Service Principal | The Entra ID service principal that the user-assigned identity runs as      |

{% hint style="info" %}
A user-assigned managed identity is an identity itself: it is backed by a service principal in Entra ID and can be assigned to multiple Azure resources.
{% endhint %}