AZCOPY_AUTO_LOGIN_TYPE="AZCLI" fails with "Tenant shouldn't be specified for managed identity account" about azure-storage-azcopy HOT 4 OPEN

Kindly share output of "azcopy env" as well.

from azure-storage-azcopy.

Just chiming in, this looks wrong:

# In an ACI container with an associated USer-Assigned identity
$env:AZCOPY_AUTO_LOGIN_TYPE = "AZCLI"
az login --identity
azcopy copy "https://[account].blob.core.windows.net/[container]/[path/to/blob]?[SAS]" "https://[account].blob.core.windows.net/[container]/[path/to/blob]"

--identity refers to MSI, but $env:AZCOPY_AUTO_LOGIN_TYPE is a completely different type of auth, and the latter here means azcopy login is unnecessary.

from azure-storage-azcopy.

Just chiming in, this looks wrong:

# In an ACI container with an associated USer-Assigned identity
$env:AZCOPY_AUTO_LOGIN_TYPE = "AZCLI"
az login --identity
azcopy copy "https://[account].blob.core.windows.net/[container]/[path/to/blob]?[SAS]" "https://[account].blob.core.windows.net/[container]/[path/to/blob]"

--identity refers to MSI, but $env:AZCOPY_AUTO_LOGIN_TYPE is a completely different type of auth, and the latter here means azcopy login is unnecessary.

That snippet is just a minimal repro, in my actual script I need az login for unrelated reasons. Then I set $env:AZCOPY_AUTO_LOGIN_TYPE = "AZCLI" so that azcopy can use the token acquired by az, rather than needlessly asking for another one.

from azure-storage-azcopy.

Kindly share output of "azcopy env" as well.

I already switched to MSI auth, I'll see if I get the time to revert and check, but may I suggest you add this requirement to the "new issue" template?

from azure-storage-azcopy.