I have a cosmos db account that was created via terraform, in which i have multiple databases. When i go to data explorer, the api type is showing as NOSQL API and the kind is “GlobalDocumentDB”. We have a security policy being enforced in the infra saying ‘Cosmos DB database accounts should have local authentication methods disabled’. When i check the terraform documentation it mentions as: “local_authentication_disabled – (Optional) Disable local authentication and ensure only MSI and AAD can be used exclusively for authentication. Defaults to false. Can be set only when using the SQL API.”

Could you please help me to understand how I can disable this in my case, without affecting the existing databases. On the authentication side i am planning to grant RBAC role to the webapp managed identity and add “COSMOS_ENDPOINT= ” in the environment variable of the webapp (value = azurerm_cosmosdb_account.cosmos_account.endpoint).