<p>I'm new to Azure and k8s and somewhat confused about when to assign rights to which principal.</p>
<p>Whats the difference between assigning rights to <code>azurerm_kubernetes_cluster.[name].kubelet_identity[0].object_id</code> vs <code>azurerm_kubernetes_cluster.[name].identity.0.principal_id</code> and are there any other principals on the cluster that might be relevant in some other situation?</p>

mibollma
<p><code>azurerm_kubernetes_cluster.[name].kubelet_identity[0].object_id</code> = Managed identity of your user node pool ( this identity is needed for example to access the ACR in order to pull images or acces the AKV via CSI integration )</p>
<p><code>azurerm_kubernetes_cluster.[name].identity.0.principal_id</code> = Managed identity of your AKS ( this identity is needed for example to add new nodes to the Vnet or use Monitoring/Metrics )</p>
