Authenticating PowerShell¶
This page describes different ways of authenticating PowerShell to the Fortytwo Universe, for different automations, such as uploading file data, talking to the connector API, etc.
All scripts use the EntraIDAccessToken PowerShell module, which means that the only thing required to connect is to complete one of the available Add-EntraID*AccessTokenProfile cmdlets. This is documented here, but below are the most common scenarios covered.
Running in an Azure VM¶
Server must be in a subscription in the same tenant as you want to manage Fortytwo Universe for. If you need cross tenant authentication, use the certificate based approach just like alocal server.
System assigned¶

User assigned¶

Add-EntraIDAzureVMMSIAccessTokenProfile -Scope "https://api.fortytwo.io/.scope" -Name Connector -UserAssignedIdentityClientId "00000000-0000-0000-0000-000000000000"
Running on a local server¶
Azure Arc¶
Add-EntraIDAzureArcManagedMSITokenProfile -Resource "https://api.fortytwo.io" -TenantId "00000000-0000-0000-0000-000000000000" -ClientId "00000000-0000-0000-0000-000000000000"