Added Mail Notification flags to bicep templates

Author: alrios-ms

Deployment/commonResources.bicep

@@ -9,6 +9,8 @@ param managedResourceGroupName string
 param appConfigurationName string
 param authenticationType string
 param setRBACPermissions bool
+param skipMailNotifications bool
+param isMailApplicationPermissionGranted bool
 
 // prereqs parameters
 // parameters for prereqs key vault
@@ -97,6 +99,8 @@ module dataResources 'dataResources.bicep' = {
     sqlSkuTier: sqlSkuTier
     tenantId: tenantId
     authenticationType: authenticationType
+    skipMailNotifications: skipMailNotifications
+    isMailApplicationPermissionGranted: isMailApplicationPermissionGranted
   }
   dependsOn: [
     prereqResources

Deployment/dataResources.bicep

@@ -12,6 +12,8 @@ param sqlSkuName string
 param sqlSkuTier string
 param tenantId string
 param authenticationType string
+param skipMailNotifications bool
+param isMailApplicationPermissionGranted bool
 
 //data resources
 module dataInfrastructureTemplate '../Infrastructure/data/template.bicep' = {
@@ -31,5 +33,7 @@ module dataInfrastructureTemplate '../Infrastructure/data/template.bicep' = {
     sqlSkuTier: sqlSkuTier
     tenantId: tenantId
     authenticationType: authenticationType
+    skipMailNotifications: skipMailNotifications
+    isMailApplicationPermissionGranted: isMailApplicationPermissionGranted
   }
 }

Deployment/localTemplate.bicep

@@ -16,6 +16,9 @@ param setRBACPermissions bool = true
   'Certificate'
 ])
 param authenticationType string
+param skipMailNotifications bool = false
+param isMailApplicationPermissionGranted bool = false
+
 // prereqs parameters
 // parameters for prereqs key vault
 @secure()
@@ -111,6 +114,8 @@ module gmmResources 'commonResources.bicep' = {
     appConfigurationName: appConfigurationName
     authenticationType: authenticationType
     setRBACPermissions: setRBACPermissions
+    skipMailNotifications: skipMailNotifications
+    isMailApplicationPermissionGranted: isMailApplicationPermissionGranted
   }
   dependsOn: [
     gmmResourceGroups

Deployment/parameters.json

@@ -2,6 +2,18 @@
   "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#",
   "contentVersion": "1.0.0.0",
   "parameters": {
+    "skipMailNotifications": {
+      "value": false,
+      "metadata": {
+        "description": "If you don't want to send email notifications set this to true. When this is true, 'senderUsername','senderPassword','supportEmailAddresses','syncDisabledCCEmailAddresses','syncCompletedCCEmailAddresses' should be set to 'not-set'."
+      }
+    },
+    "isMailApplicationPermissionGranted": {
+      "value": false,
+      "metadata": {
+        "description": "If you are not able or don't want to use delegated Mail.Send permission, you can grant application permission Mail.Send to the <solution>-Graph-<environment> or <solution>-identity-<environment>-Graph application depending on the authentication type selected. Then set this parameter to true."
+      }
+    },
     "senderUsername": {
       "value": "",
       "metadata": {
@@ -14,40 +26,40 @@
         "description": "The password of the user that will be used to send emails."
       }
     },
-    "teamsChannelServiceAccountObjectId": {
+    "supportEmailAddresses": {
       "value": "",
       "metadata": {
-        "description": "The object id of the service account that will be used to manage Teams channels."
+        "description": "The email addresses of the users that will receive support emails."
       }
     },
-    "teamsChannelServiceAccountUsername": {
+    "syncDisabledCCEmailAddresses": {
       "value": "",
       "metadata": {
-        "description": "The username of the service account that will be used to manage Teams channels."
+        "description": "The email addresses of the users that will receive emails when a sync job is disabled."
       }
     },
-    "teamsChannelServiceAccountPassword": {
+    "syncCompletedCCEmailAddresses": {
       "value": "",
       "metadata": {
-        "description": "The password of the service account that will be used to manage Teams channels."
+        "description": "The email addresses of the users that will receive emails when a sync job is completed."
       }
     },
-    "supportEmailAddresses": {
+    "teamsChannelServiceAccountObjectId": {
       "value": "",
       "metadata": {
-        "description": "The email addresses of the users that will receive support emails."
+        "description": "The object id of the service account that will be used to manage Teams channels."
       }
     },
-    "syncDisabledCCEmailAddresses": {
+    "teamsChannelServiceAccountUsername": {
       "value": "",
       "metadata": {
-        "description": "The email addresses of the users that will receive emails when a sync job is disabled."
+        "description": "The username of the service account that will be used to manage Teams channels."
       }
     },
-    "syncCompletedCCEmailAddresses": {
+    "teamsChannelServiceAccountPassword": {
       "value": "",
       "metadata": {
-        "description": "The email addresses of the users that will receive emails when a sync job is completed."
+        "description": "The password of the service account that will be used to manage Teams channels."
       }
     },
     "location": {
@@ -175,7 +187,7 @@
     "authenticationType": {
       "value": "UserAssignedManagedIdentity|ClientSecret|Certificate",
       "metadata": {
-        "description": "The type of authentication to use for the App Configuration. UserAssignedManagedIdentity is recommended."
+        "description": "The type of authentication to use for the App Configuration. UserAssignedManagedIdentity is recommended and will use <solution>-identity-<environment>-Graph. ClientSecret and Certificate will use <solution>-Graph-<environment>."
       }
     },
     "pipeline": {

Infrastructure/data/template.bicep

@@ -145,6 +145,8 @@ param logAnalyticsSku string = 'PerGB2018'
   'Certificate'
 ])
 param authenticationType string = 'ClientSecret'
+param skipMailNotifications bool = false
+param isMailApplicationPermissionGranted bool = false
 
 @description('Enter app configuration name.')
 @minLength(1)
@@ -315,6 +317,22 @@ param appConfigurationKeyData array = [
     }
     description: 'Authentication type for Graph API. Possible values: UserAssignedManagedIdentity, ClientSecret, Certificate'
   }
+  {
+    key: 'Mail:IsMailApplicationPermissionGranted'
+    value: isMailApplicationPermissionGranted
+    contentType: 'bool'
+    tag: {
+      tag1: 'Mail'
+    }
+  }
+  {
+    key: 'Mail:SkipMailNotifications'
+    value: skipMailNotifications
+    contentType: 'bool'
+    tag: {
+      tag1: 'Mail'
+    }
+  }
 ]
 
 @description('Array of feature flags objects. {id:"value", description:"description", enabled:true }')