Entra MI auth and access control support for enterprise tier

Question

Entra MI auth and access control support for enterprise tier

Kelly Yin 20 Microsoft Employee

From the official Azure Cache for Redis documentation, we noticed that the Enterprise tier offers an SLA of 99.999% when active-active geo-replication is enabled, which is quite attractive. However, we also observed a few limitations that may be concerning:

-> Entra ID authentication is not supported in the Enterprise tier, meaning Managed Identity (MI) cannot be used. Authentication is currently limited to connection strings, which could be a concern for SFI.

-> Access Control Lists (ACLs) are not supported, so it's unclear how to enforce access restrictions such as allowing only one service to write while others are limited to read-only access.

Do we have visibility into the feature roadmap or release cadence for these capabilities? I assume these limitations exist because the Enterprise tier is still in preview, but would appreciate confirmation.

Additionally, for the Premium tier, I noticed the SLA is up to 99.9%. Is it possible to increase this SLA by enabling geo-replication and clustering, similar to the Enterprise tier?

Saraswathi Devadula 13,495 Reputation points Microsoft External Staff Moderator

2025-07-14T10:20:40.3533333+00:00

Hello Litian Yin

Please be informed that regarding the enterprise tier feature roadmap, please review the below information,

Do we have visibility into the feature roadmap or release cadence for these capabilities?

This will not be supported with the Azure Cache for Redis Enterprise. Please use Azure Managed Redis for Entra ID:

Overview: Azure Managed Redis | Microsoft Azure

Entra ID with Azure Managed Redis: Use Microsoft Entra for cache authentication with Azure Managed Redis - Azure Managed Redis | Microsoft Learn

ACLs will be supported tentatively early next year

Regarding the premium tier, **using the Active-Passive geo replication with Premium tier will increase SLA to 99.99% by configuring the passive geo replication.
**
Passive geo-replication links together two Premium tier Azure Cache for Redis instances and creates an active-passive data replication relationship. Active-passive means that there's a pair of caches, primary and secondary, that have their data synchronized.

Reference document: https://xtls-v4.hkg1.meaqua.org/en-us/azure/azure-cache-for-redis/cache-how-to-geo-replication
Saraswathi Devadula 13,495 Reputation points Microsoft External Staff Moderator

2025-07-15T14:34:45.0333333+00:00

Hello Litian Yin

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Kelly Yin 20 Reputation points Microsoft Employee

2025-07-16T08:59:33.75+00:00

Hi @Saraswathi Devadula , thanks for your prompt reply!

So i'm a little confused on the azure cache for redis and azure managed redis, per ms official doc, looks like AMR(azure managed redis) has more advanced features and better performance which built on Enterprise Redis. I have the following questions:

-> So is AMR a replacement for Enterprise and Enterprise flash tier azure cache for redis? since AMR supports entra auth but azure cache for redis enterprise(flash) does not. I think using entra auth is a more modern and secure way. Or in other words, if we want to use azure redis products on Enterprise redis, would it be a better choice to pick AMR over Enterprise(flash) tier of azure cache for redis?

-> Where can i find SLA for AMR? i tried search but not found

-> seems AMR also do not support ACL for now, do we have plan for it?
Kishor kumar Reddy Akki 10 Reputation points

2025-12-04T09:25:04.9733333+00:00

Hi @Saraswathi Devadula

I hope you are doing well.

I wanted to double-check the expected timeline for ACL support in AMR. Our understanding from the previous update is that the ETA is Feb 2026 (early next year). Could you please confirm if this timeline is still accurate or if there is any possibility of change?

Thank you in advance for your confirmation.

Answer accepted by question author

1 additional answer

Your answer

Saraswathi Devadula 13,495 Reputation points Microsoft External Staff Moderator

2025-07-14T10:20:40.3533333+00:00

Hello Litian Yin

Please be informed that regarding the enterprise tier feature roadmap, please review the below information,

Do we have visibility into the feature roadmap or release cadence for these capabilities?

This will not be supported with the Azure Cache for Redis Enterprise. Please use Azure Managed Redis for Entra ID:

Overview: Azure Managed Redis | Microsoft Azure

Entra ID with Azure Managed Redis: Use Microsoft Entra for cache authentication with Azure Managed Redis - Azure Managed Redis | Microsoft Learn

ACLs will be supported tentatively early next year

Regarding the premium tier, **using the Active-Passive geo replication with Premium tier will increase SLA to 99.99% by configuring the passive geo replication.
**
Passive geo-replication links together two Premium tier Azure Cache for Redis instances and creates an active-passive data replication relationship. Active-passive means that there's a pair of caches, primary and secondary, that have their data synchronized.

Reference document: https://xtls-v4.hkg1.meaqua.org/en-us/azure/azure-cache-for-redis/cache-how-to-geo-replication
Saraswathi Devadula 13,495 Reputation points Microsoft External Staff Moderator

2025-07-15T14:34:45.0333333+00:00

Hello Litian Yin

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Kelly Yin 20 Reputation points Microsoft Employee

2025-07-16T08:59:33.75+00:00

Hi @Saraswathi Devadula , thanks for your prompt reply!

So i'm a little confused on the azure cache for redis and azure managed redis, per ms official doc, looks like AMR(azure managed redis) has more advanced features and better performance which built on Enterprise Redis. I have the following questions:

-> So is AMR a replacement for Enterprise and Enterprise flash tier azure cache for redis? since AMR supports entra auth but azure cache for redis enterprise(flash) does not. I think using entra auth is a more modern and secure way. Or in other words, if we want to use azure redis products on Enterprise redis, would it be a better choice to pick AMR over Enterprise(flash) tier of azure cache for redis?

-> Where can i find SLA for AMR? i tried search but not found

-> seems AMR also do not support ACL for now, do we have plan for it?
Kishor kumar Reddy Akki 10 Reputation points

2025-12-04T09:25:04.9733333+00:00

Hi @Saraswathi Devadula

I hope you are doing well.

I wanted to double-check the expected timeline for ACL support in AMR. Our understanding from the previous update is that the ETA is Feb 2026 (early next year). Could you please confirm if this timeline is still accurate or if there is any possibility of change?

Thank you in advance for your confirmation.

Answer 1

Hello Kelly Yin
Kindly please review the information, which you requested: If we want to use azure redis products on Enterprise redis, would it be a better choice to pick AMR over Enterprise(flash) tier of azure cache for redis?

Yes, please use Azure Managed Redis

Overview: Azure Managed Redis | Microsoft Azure

Entra ID with Azure Managed Redis: Use Microsoft Entra for cache authentication with Azure Managed Redis - Azure Managed Redis | Microsoft Learn

Where can i find SLA for AMR? i tried search but not found?

Azure Managed Redis SLA is here: Licensing Documents In that document, please select 2025 year and download the July month and search for Azure managed redis, where you can verify about the SLA.
User's image

Seems AMR also do not support ACL for now, do we have plan for it?

ETA is Feb 2026. The ACL support will come in next February. Currently there is no way to achieve the effect that one MI can write but other MIs can only read.

Saraswathi Devadula 13,495 Reputation points Microsoft External Staff Moderator

2025-07-18T05:29:08.6866667+00:00

Hello Kelly Yin Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful.

Answer 2

Kishor kumar Reddy Akki 10

Hi @Saraswathi Devadula

I hope you are doing well.

I wanted to double-check the expected timeline for ACL support in AMR. Our understanding from the previous update is that the ETA is Feb 2026 (early next year). Could you please confirm if this timeline is still accurate or if there is any possibility of change?

Thank you in advance for your confirmation.

Kishor kumar Reddy Akki 10 Reputation points

2025-12-03T09:22:09.23+00:00

Hi @Saraswathi Devadula

I hope you are doing well.

I wanted to double-check the expected timeline for ACL support in AMR. Our understanding from the previous update is that the ETA is Feb 2026 (early next year). Could you please confirm if this timeline is still accurate or if there is any possibility of change?

Thank you in advance for your confirmation.

Share via

Entra MI auth and access control support for enterprise tier

1 additional answer

Your answer