Why VM log in user not showing as Entra ID user even Role assignments given

whoami always returns the local Linux account you authenticated as — it has nothing to do with Azure RBAC role assignments. RBAC roles (like Virtual Machine User Login) never appear in whoami. [linuxcent.com]

Look at how you connected:

ssh -i ~/.ssh/vm1 adminuser@172.182.192.93

You logged in as the local account adminuser (the admin_username defined in your Terraform main.tf, line 57) using its SSH key. That is local authentication, completely bypassing Microsoft Entra ID. So the OS correctly reports adminuser.

The Virtual Machine User Login role (and Virtual Machine Administrator Login) only take effect when you sign in using your Microsoft Entra ID (Azure AD) credentials via OpenSSH certificate-based authentication i.e., the Diptesh Kumar identity you see under IAM. Until you actually authenticate as that Entra user, the role does nothing to your shell.

The fix here is log in with Entra ID, not the local key:

Confirm the prerequisites on the VM

1. System-assigned managed identity is enabled on the VM.
2. The AADSSHLoginForLinux extension (publisher Microsoft.Azure.ActiveDirectory) is installed.
3. The Entra user (Diptesh Kumar) has Virtual Machine User Login or Virtual Machine Administrator Login on the VM/resource group (you've done this)

In Terraform you'd add:

identity {
  type = "SystemAssigned"
}

resource "azurerm_virtual_machine_extension" "aad_login" {
  name                 = "AADSSHLoginForLinux"
  virtual_machine_id   = azurerm_linux_virtual_machine.vm1.id
  publisher            = "Microsoft.Azure.ActiveDirectory"
  type                 = "AADSSHLoginForLinux"
  type_handler_version = "1.0"
}
``

Sign in as the Entra user (not with the local key)

az login
az ssh vm --resource-group <your-rg> --name vm1linuxVMdev

Now run whoami - After an Entra-based login, the username is the sanitized UPN, e.g.:

whoami -- diptesh_kumar_contoso_com

HI HImaAnshu

I did as you suggested, I can see as below :

and i can see from powershell as below :

<private details removed>

so why i am not able to see in first screen even though i gave role assignment to user.

please look at your terminal command (line in red):

ssh -i ~/.ssh/vm1 adminuser@20.--.--.---

You're still using the local SSH private key to log in as the local adminuser account. That path never touches Entra ID, so:

1. The AADSSHLoginForLinux extension isn't invoked
2. The Virtual Machine User Login role assignment isn't evaluated
3. whoami correctly reports adminuser (the local Linux user)

Log in using Microsoft Entra ID, not the SSH key

az login az ssh vm --ip 20.--.<--->.<---> - (fill as per required ip address)

or

az ssh vm --resource-group <your-rg> --name vm1linuxVMdev

az ssh vm fetches a short-lived OpenSSH certificate tied to your Entra identity and uses that to authenticate — no -i ~/.ssh/vm1 needed.

After successful Entra login, whoami will show - youruser_yourtenant_onmicrosoft_com

Note - Virtual Machine User Login = non-sudo access only. If the user needs sudo, change role_definition_name to Virtual Machine Administrator Login.

role_definition_name = "Virtual Machine User Login"