When Admin user is not enabled Repositories are not searchable. about acr HOT 4 CLOSED

Service principal credentials are not retrievable so there is no way to authenticate with the registry in the portal if admin user is not enabled, thus you were seeing the message.

docker search is not a supported Docker V2 API, thus you were seeing the error. It is not related to whether admin user is enabled or not.

If you only use service principal to authenticate, one way to list images is to use the Azure CLI:

az acr repository list -n <your registry name>

And enter your service principal app id and password in the prompt. Or provide them as command arguments:

az acr repository list -n <your registry name> -u <your service principal app id> -p <your service principal password>

from acr.

The question has been answered. But this is a usability issue. It really makes no sense that I can log in to the azure portal as a user that has 'owner' access rights to the ACR instance, but I can't list that registry's images.

I live in a world that is very sensitive to security issues. By not allowing AD User Principals to list the registry images you have limited our ability to audit who did what. We aren't going to create a different service principal for every user - that defeats the whole point of a service principal. For ACR this is a minor issue because no data will ever get saved in these images. It is just confusing because ACR doesn't behave like other Azure services.

from acr.

@markarnott - AAD integration #32 is something we are definitely implementing. We understand the issues related to SP creation and maintaining them from a security perspective and once AAD is integrated with ACR, you should be able to managed users directly on the registry resource as you would with any other Azure resource.
/cc @DavidObando

from acr.

This is now available on the portal.

from acr.