Here, the template is using the local identity (in the case of the validation action, the managed identity) to perform various data-plane operations on Azure. Perhaps this is related to logging in as ...