docs(byob): explain Azure authentication options

[zacharyblasczyk]

Summary

Update the public BYOB guide for the Azure authentication choices in System Console:

• Keep storage account keys documented as a supported option.
• Explain workload identity and user-delegation SAS.
• Direct administrators to grant Reader and Storage Blob Data Contributor to the displayed managed identity principal ID.
• Explain that storage consumers share the deployment-wide wandb-bucket-access Kubernetes ServiceAccount.
• State that workload identity is opt-in and existing key-based BYOB configurations continue using their keys.
• Document the operator-wandb 0.44.0 and global.azureStorageIdentity prerequisites.

The page contains no customer-specific or incident-specific information. Publish it with the compatible chart and application releases.

Verification

• Reviewed against wandb/core#49026, wandb/console#149, and feat(operator-wandb): use deployment-wide Azure storage identity helm-charts#606.
• mint broken-links with Node 24: no broken links.
• git diff --check.

Jira: WB-38013

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
wandb	🟢 Ready	View Preview	Jul 27, 2026, 7:50 PM

[github-actions]

📚 Mintlify Preview Links

🔗 View Full Preview

📝 Changed (1 total)

📄 Pages (1)

File	Preview
platform/hosting/data-security/secure-storage-connector.mdx	Secure Storage Connector

---

🤖 Generated automatically when Mintlify deployment succeeds
📍 Deployment: 04662b5 at 2026-07-29 23:30:38 UTC

[github-actions]

🔗 Link Checker Results

⚠️ Some issues were detected

Preview: https://wb-21fd5541-agent-azure-byob-auth-docs.mintlify.site

Full Github Actions output

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
wandb	🟡 Building	–	Jul 27, 2026, 7:47 PM

[github-actions]

Readability impact

Word-weighted Flesch-Kincaid grade change across 3 changed pages: +0.1 (harder).

Lower Flesch-Kincaid grade and higher reading ease both mean easier to read. This check is informational and never blocks a PR.

Human readability

Page	FK grade before	FK grade after	FK Δ	Reading ease Δ	Direction
platform/hosting/data-security/secure-storage-connector.mdx	9.3	9.4	+0.1	-0.8	harder
release-notes/server-releases-archived.mdx	10.4	10.5	+0.1	-0.5	harder
release-notes/server-releases.mdx	9.3	9.3	+0.0	+0.7	unchanged

AI agent comprehension

Rated 0-3 (higher is easier for an agent to parse and act on).

Page	Before	After	Δ
release-notes/server-releases.mdx	—	—	—
release-notes/server-releases-archived.mdx	—	—	—
platform/hosting/data-security/secure-storage-connector.mdx	—	—	—

_{Curated-docs baseline median FK grade by type: conceptual 10.5, procedural 8.8, reference 9.4.}

From workflow run 30499631433