In layman’s terms, a managed identity is an automatically provisioned and managed identity resource that can be used to access other resources in Azure. That would automatically pick up an identity I’ve assigned to my Azure Batch resource and give me the Key Vault data (that also had the identity assigned to it). Now, that’s all nice when I have pre-built tools for me that use managed identity, like the Azure CLI, but what if I am building my own software that needs to run, let’s say, inside a virtual machine, that also needs to access the managed identity?