---
key: "avm-res-managedidentity-userassignedidentity"
name: "Azure Verified Module avm-res-managedidentity-userassignedidentity"
kind: "module"
cloud: "azure"
namespace: "Azure/avm-res-managedidentity-userassignedidentity/azurerm"
registry_url: "https://registry.terraform.io/modules/Azure/avm-res-managedidentity-userassignedidentity"
subject: "User Assigned Identity"
repo_url: "https://github.com/Azure/terraform-azurerm-avm-res-managedidentity-userassignedidentity"
latest_version: "0.6.0"
latest_date: "2026-10-27"
latest_confirmed: true
latest_notes_read: true
oldest_tracked_version: "0.1.0"
breaking_releases_last_12_months: 1
counted_since: null
url: "https://eolwatch.dev/providers/avm-res-managedidentity-userassignedidentity"
markdown_url: "https://eolwatch.dev/providers/avm-res-managedidentity-userassignedidentity.md"
json_url: "https://eolwatch.dev/providers/avm-res-managedidentity-userassignedidentity.json"
as_of: "2026-11-13"
from: null
state: "all"
unread_versions: []
short_url: "https://eolwatch.dev/p/avm-res-managedidentity-userassignedidentity"
---

# avm-res-managedidentity-userassignedidentity breaking changes

An Azure Verified Module for Terraform, published as [`Azure/avm-res-managedidentity-userassignedidentity/azurerm`](https://registry.terraform.io/modules/Azure/avm-res-managedidentity-userassignedidentity) in the Terraform Registry: the resource module for User Assigned Identity.

- Cloud: Azure
- Latest v0.6.0, released 27 Oct 2026
- 1 release that lists breaking changes in the last 12 months, counted for 13 Nov 2026 (UTC)

Every release from v0.1.0 up to v0.6.0: 1 release with breaking changes, 4 changes

## avm-res-managedidentity-userassignedidentity breaking changes: v0.1.0 to v0.6.0

### v0.6.0 (2026-10-27)

[Release notes](https://github.com/Azure/terraform-azurerm-avm-res-managedidentity-userassignedidentity/releases/tag/v0.6.0)

- [ ] Rename role_assignments to outbound_role_assignments in every module call; the old argument is no longer accepted. Preserve the existing map keys and values. These remain outbound grants to the created identity at each supplied scope, not grants to other principals on the identity. The resource block remains azurerm_role_assignment.this, so the input rename alone does not require state moves.
- [ ] Outbound role assignment description is now applied instead of ignored. AzureRM treats description changes as replacement, so existing non-null descriptions can replace assignments on upgrade. Inspect the plan for resulting access changes. Other role attributes and their existing null defaults remain unchanged.
- [ ] enable_telemetry remains true by default. Enabled telemetry creates an empty Incremental Microsoft.Resources/deployments resource at the AzAPI provider subscription, using the existing required real region. Subscription deployment-management permissions are required; resource-group-only permissions may be insufficient. Owner is not specifically required. Configure the intended AzAPI subscription or set enable_telemetry=false. Deployment-history records and plan-timestamp updates are new behavior.
- [ ] ModTM and telemetry-only root random requirements are removed. removed blocks with destroy=false request forgetting the old telemetry resources without destruction. Workload addresses are preserved; historical-state migration has not been exercised. Back up state and inspect the upgrade plan, especially outbound assignment descriptions, before applying.

Source: https://eolwatch.dev/p/avm-res-managedidentity-userassignedidentity

Page: https://eolwatch.dev/providers/avm-res-managedidentity-userassignedidentity | JSON: https://eolwatch.dev/providers/avm-res-managedidentity-userassignedidentity.json