docs(byob): explain Azure authentication options

[zacharyblasczyk]

Summary

Update the public BYOB guide for the Azure authentication choices in System Console:

• Keep storage account keys documented as a supported option.
• Explain workload identity and user-delegation SAS.
• Direct administrators to grant Reader and Storage Blob Data Contributor to the displayed managed identity principal ID.
• Explain that storage consumers share the deployment-wide wandb-bucket-access Kubernetes ServiceAccount.
• State that workload identity is opt-in and existing key-based BYOB configurations continue using their keys.
• Document the operator-wandb 0.44.0 and global.azureStorageIdentity prerequisites.

The page contains no customer-specific or incident-specific information. Publish it with the compatible chart and application releases.

Verification

• Reviewed against wandb/core#49026, wandb/console#149, and feat(operator-wandb): use deployment-wide Azure storage identity helm-charts#606.
• mint broken-links with Node 24: no broken links.
• git diff --check.

Jira: WB-38013

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
wandb	🟢 Ready	View Preview	Jul 27, 2026, 7:50 PM

[github-actions]

📚 Mintlify Preview Links

🔗 View Full Preview

📝 Changed (3 total)

📄 Pages (3)

File	Preview
platform/hosting/data-security/secure-storage-connector.mdx	Secure Storage Connector
snippets/_includes/byob-reference-setup.mdx	Byob Reference Setup
snippets/_includes/weave-byob.mdx	Weave Byob

---

🤖 Generated automatically when Mintlify deployment succeeds
📍 Deployment: 14c9888 at 2026-08-19 22:45:50 UTC

[github-actions]

🔗 Link Checker Results

✅ All links are valid!

No broken links were detected.

Preview: https://wb-21fd5541-agent-azure-byob-auth-docs.mintlify.site

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
wandb	🟡 Building	–	Jul 27, 2026, 7:47 PM

[github-actions]

Readability impact

Word-weighted Flesch-Kincaid grade change across 2 changed pages: +0.1 (harder).

Lower Flesch-Kincaid grade and higher reading ease both mean easier to read. This check is informational and never blocks a PR.

Human readability

Page	FK grade before	FK grade after	FK Δ	Reading ease Δ	Direction
platform/hosting/data-security/secure-storage-connector.mdx	9.3	9.4	+0.1	-1.2	harder
snippets/_includes/byob-reference-setup.mdx	7.5	7.6	+0.1	-0.3	harder
snippets/_includes/weave-byob.mdx	—	10.1	—	—	n/a

AI agent comprehension

Rated 0-3 (higher is easier for an agent to parse and act on).

Page	Before	After	Δ
platform/hosting/data-security/secure-storage-connector.mdx	2	2	+0
snippets/_includes/byob-reference-setup.mdx	3	3	+0
snippets/_includes/weave-byob.mdx	—	2	—

_{Curated-docs baseline median FK grade by type: conceptual 10.5, procedural 8.8, reference 9.4.}

From workflow run 32309996709

[mdlinville]

WDYT?