AzureCLICredential: Azure CLI credential authentication

In azr: Credential Chain for OAuth 2.0 Authentication to 'Azure'

Azure CLI credential authentication

Description

Authenticates using the Azure CLI (az) command-line tool. This credential requires the Azure CLI to be installed and the user to be logged in via ⁠az login⁠.

Details

The credential uses the ⁠az account get-access-token⁠ command to retrieve access tokens. It will use the currently active Azure CLI account and subscription unless a specific tenant is specified.

Super class

Credential -> AzureCLICredential

Public fields

auto_login

Logical indicating whether to check login status and perform login if needed

use_bridge

Logical indicating whether to use the device code bridge webpage during interactive login

.process_timeout

Timeout in seconds for Azure CLI command execution

Methods

Public methods

• AzureCLICredential$new()

• AzureCLICredential$get_token()

• AzureCLICredential$req_auth()

• AzureCLICredential$account_show()

• AzureCLICredential$login()

• AzureCLICredential$is_interactive()

• AzureCLICredential$logout()

• AzureCLICredential$clone()

Inherited methods

• Credential$print()
• Credential$validate()

---

AzureCLICredential$new()

Create a new Azure CLI credential

Usage

AzureCLICredential$new(
  scope = NULL,
  tenant_id = NULL,
  process_timeout = NULL,
  auto_login = opts$get("cli_auto_login"),
  use_bridge = FALSE,
  interactive = NULL
)

Arguments

scope

A character string specifying the OAuth2 scope. Defaults to NULL, which uses the scope set during initialization.

tenant_id

A character string specifying the Azure Active Directory tenant ID. Defaults to NULL, which uses the default tenant from Azure CLI.

process_timeout

A numeric value specifying the timeout in seconds for the Azure CLI process. Defaults to 10.

auto_login

A logical value indicating whether get_token() may launch ⁠az login⁠ when the user is not logged in. Defaults to the cli_auto_login option (options(azr.cli_auto_login = ...) or AZR_CLI_AUTO_LOGIN); see azr_options().

use_bridge

A logical value indicating whether to use the device code bridge webpage during login. If TRUE, launches an intermediate local webpage that displays the device code and facilitates copy-pasting before redirecting to the Microsoft device login page. Only used when auto_login = TRUE. Defaults to FALSE. Ignored inside VS Code, which cannot open the local page.

interactive

Deprecated. Use auto_login instead.

Returns

A new AzureCLICredential object

---

AzureCLICredential$get_token()

Get an access token from Azure CLI

Usage

AzureCLICredential$get_token(scope = NULL)

Arguments

scope

A character string specifying the OAuth2 scope. If NULL, uses the scope specified during initialization.

Returns

An httr2::oauth_token() object containing the access token

---

AzureCLICredential$req_auth()

Add authentication to an httr2 request

Usage

AzureCLICredential$req_auth(req, scope = NULL)

Arguments

req

An httr2::request() object

scope

A character string specifying the OAuth2 scope. If NULL, uses the scope specified during initialization.

Returns

The request object with authentication header added

---

AzureCLICredential$account_show()

Show the currently active Azure CLI account information

Usage

AzureCLICredential$account_show(timeout = NULL)

Arguments

timeout

A numeric value specifying the timeout in seconds for the Azure CLI command. If NULL, uses the process timeout specified during initialization.

Returns

A list containing the account information from Azure CLI

---

AzureCLICredential$login()

Perform Azure CLI login using device code flow

Usage

AzureCLICredential$login(force = FALSE)

Arguments

force

If FALSE (default), an existing login is reused. If TRUE, always runs ⁠az login⁠.

Returns

The value of az_cli_login(), invisibly.

---

AzureCLICredential$is_interactive()

Check if the credential requires user interaction

Usage

AzureCLICredential$is_interactive()

Returns

Logical indicating whether this credential is interactive

---

AzureCLICredential$logout()

Log out from Azure CLI

Usage

AzureCLICredential$logout()

Returns

Invisibly returns NULL

---

AzureCLICredential$clone()

The objects of this class are cloneable with this method.

Usage

AzureCLICredential$clone(deep = FALSE)

Arguments

deep

Whether to make a deep clone.

Examples

# 'az login' must have been executed successfully for these examples to work.
## Not run: 
# Create credential with default settings
cred <- AzureCLICredential$new()

# Create credential with specific scope and tenant
cred <- AzureCLICredential$new(
  scope = "https://management.azure.com/.default",
  tenant_id = "your-tenant-id"
)

# Get an access token
token <- cred$get_token()

# Use with httr2 request
req <- httr2::request("https://management.azure.com/subscriptions")
resp <- httr2::req_perform(cred$req_auth(req))

## End(Not run)

azr documentation built on Nov. 13, 2026, 5:07 p.m.