EventHub: Connection string for ServiceBus or for EventHub Policy? RRS feed

  • Question

  • I confused.

    There is RootManageSharedAccessKey for the ServiceBus itself:

    the Endpoint=sb://;SharedAccessKeyName=RootManageSharedAccessKey;...

    There can be also the "Shared Access Policies" for each EventHub, which have names.

    Seems we have to use the RootManageSharedAccessKey for the create/delete/.. eventhubs.

    What we have to use to send/receive(listen) messages from eventhubs? Can we use both keys (RootManageSharedAccessKey and Shared Access Policy Keys? Or we have to use only the Shared Access Policy Keys?

    Leonid Ganeline [BizTalk MVP]

    Wednesday, November 26, 2014 11:17 PM


  • You are right - My understanding is this... We may use any for runtime operations on specific EventHub, however, it's always good to use keys that have minimal but sufficient access. Management operations should be using SAS tokens of entire ServiceBus namespace. I believe, SAS tokens exclusively for each EventHub is for selective auth per EventHub.


    Thursday, November 27, 2014 2:52 AM