Skip to content

Commit 8680839

Browse files
alrios-msdanielluo-msft
authored andcommitted
Make role id unique per environment
1 parent 2d22c61 commit 8680839

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

Deployment/rbacTemplate.bicep

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,13 +4,16 @@ param roleDefinitionId string
44
@description('Array of principals to assign the role to. [{principalId: string, principalType: string}]')
55
param principals array
66

7+
@description('Name of the data resource group')
8+
param dataResourceGroupName string
9+
710
resource appConfigDataReaderRoleDefinition 'Microsoft.Authorization/roleDefinitions@2022-05-01-preview' existing = {
811
name: roleDefinitionId
912
}
1013

1114
// 'App Configuration Data Owner'
1215
resource roleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = [for principal in principals: {
13-
name: guid(principal.principalId, roleDefinitionId)
16+
name: guid(principal.principalId, roleDefinitionId, dataResourceGroupName)
1417
properties: {
1518
roleDefinitionId: appConfigDataReaderRoleDefinition.id
1619
principalId: principal.principalId

Deployment/resourceGroups.bicep

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,5 +29,6 @@ module appConfigurationRBAC 'rbacTemplate.bicep' = if (grantAppConfigurationData
2929
// App Configuration Data Owner
3030
roleDefinitionId: '5ae67dd6-50cb-40e7-96ff-dc2bfa4b606b'
3131
principals: appConfigurationDataOwners
32+
dataResourceGroupName: dataResourceGroupName
3233
}
3334
}

0 commit comments

Comments
 (0)