Index specific admin keys
As of today Azure Search providee index specific query keys, but only global admin keys. In a multitenant scenario all tenants then have to share the admin key in order to index data. In order to provide sufficient tenant isolation in multi-tenant scenarios we need index specific admin keys. Especially for those cases where each tenant run in process isolation - hence the individual tenants can't access other tenants connection strings.
Thank you for your feedback. While it is unlikely we’ll address this suggestion in the near future, we’ll reassess based on the number of votes it receives.
Azure Search Product Team
Mick Lang commented
Its good to have the ability to create query keys. It would be better if these query keys were linked to a specific index, rather than the key working on all the indexes.
Being able to create additional keys just for querying is also inadequate for my requirements, each client also needs to be able to modify the contents of an index such as...
I would suggest having a facility that allows you to create an API key, then be able to edit the key and choose the operations that can be performed with the key and optionally specify an index on which the operations may be performed.
Péter Juhász commented
It's cool that you do not need to proxy search queries through your web application, the clients can query the REST API directly. But at the moment, all query keys are global. Some of our indexes contain sensitive data, that we do not want to make available to anyone with a query key.
Multi-tenancy (and thus security) is important for us