Skip to content

Commit fbbd87f

Browse files
change role names to role ids
1 parent e978828 commit fbbd87f

3 files changed

Lines changed: 55 additions & 55 deletions

File tree

infra/main.bicep

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -592,7 +592,7 @@ module avmContainerRegistry 'modules/container-registry.bicep' = {
592592
roleAssignments: [
593593
{
594594
principalId: avmContainerRegistryReader.outputs.principalId
595-
roleDefinitionIdOrName: 'AcrPull'
595+
roleDefinitionIdOrName: '7f951dda-4ed3-4680-a7ca-43fe172d538d' //'AcrPull'
596596
principalType: 'ServicePrincipal'
597597
}
598598
]
@@ -620,36 +620,36 @@ module avmStorageAccount 'br/public:avm/res/storage/storage-account:0.32.0' = {
620620
roleAssignments: [
621621
{
622622
principalId: avmManagedIdentity.outputs.principalId
623-
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
623+
roleDefinitionIdOrName: 'ba92f5b4-2d11-453d-a403-e96b0029c9fe' //'Storage Blob Data Contributor'
624624
principalType: 'ServicePrincipal'
625625
}
626626
{
627-
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
627+
roleDefinitionIdOrName: 'ba92f5b4-2d11-453d-a403-e96b0029c9fe' //'Storage Blob Data Contributor'
628628
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
629629
principalType: 'ServicePrincipal'
630630
}
631631
{
632-
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
632+
roleDefinitionIdOrName: 'ba92f5b4-2d11-453d-a403-e96b0029c9fe' //'Storage Blob Data Contributor'
633633
principalId: avmContainerApp_API.outputs.systemAssignedMIPrincipalId!
634634
principalType: 'ServicePrincipal'
635635
}
636636
{
637-
roleDefinitionIdOrName: 'Storage Queue Data Contributor'
637+
roleDefinitionIdOrName: '974c5e8b-45b9-4653-ba55-5f855dd0fb88' //'Storage Queue Data Contributor'
638638
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
639639
principalType: 'ServicePrincipal'
640640
}
641641
{
642-
roleDefinitionIdOrName: 'Storage Queue Data Contributor'
642+
roleDefinitionIdOrName: '974c5e8b-45b9-4653-ba55-5f855dd0fb88' //'Storage Queue Data Contributor'
643643
principalId: avmContainerApp_API.outputs.systemAssignedMIPrincipalId!
644644
principalType: 'ServicePrincipal'
645645
}
646646
{
647-
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
647+
roleDefinitionIdOrName: 'ba92f5b4-2d11-453d-a403-e96b0029c9fe' //'Storage Blob Data Contributor'
648648
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
649649
principalType: 'ServicePrincipal'
650650
}
651651
{
652-
roleDefinitionIdOrName: 'Storage Queue Data Contributor'
652+
roleDefinitionIdOrName: '974c5e8b-45b9-4653-ba55-5f855dd0fb88' //'Storage Queue Data Contributor'
653653
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
654654
principalType: 'ServicePrincipal'
655655
}
@@ -729,32 +729,32 @@ module avmAiServices 'modules/account/aifoundry.bicep' = {
729729
}
730730
{
731731
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
732-
roleDefinitionIdOrName: 'Cognitive Services OpenAI User'
732+
roleDefinitionIdOrName: '5e0bd9bd-7b93-4f28-af87-19fc36ad61bd' //'Cognitive Services OpenAI User'
733733
principalType: 'ServicePrincipal'
734734
}
735735
{
736736
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
737-
roleDefinitionIdOrName: 'Azure AI Developer'
737+
roleDefinitionIdOrName: '64702f94-c441-49e6-a78b-ef80e0188fee' //'Azure AI Developer'
738738
principalType: 'ServicePrincipal'
739739
}
740740
{
741741
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
742-
roleDefinitionIdOrName: 'Cognitive Services OpenAI User'
742+
roleDefinitionIdOrName: '5e0bd9bd-7b93-4f28-af87-19fc36ad61bd' //'Cognitive Services OpenAI User'
743743
principalType: 'ServicePrincipal'
744744
}
745745
{
746746
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
747-
roleDefinitionIdOrName: 'Azure AI Developer'
747+
roleDefinitionIdOrName: '64702f94-c441-49e6-a78b-ef80e0188fee' //'Azure AI Developer'
748748
principalType: 'ServicePrincipal'
749749
}
750750
{
751751
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
752-
roleDefinitionIdOrName: 'Cognitive Services User'
752+
roleDefinitionIdOrName: 'a97b65f3-24c7-4388-baec-2e87135dc908' //'Cognitive Services User'
753753
principalType: 'ServicePrincipal'
754754
}
755755
{
756756
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
757-
roleDefinitionIdOrName: 'Cognitive Services User'
757+
roleDefinitionIdOrName: 'a97b65f3-24c7-4388-baec-2e87135dc908' //'Cognitive Services User'
758758
principalType: 'ServicePrincipal'
759759
}
760760
]
@@ -1316,22 +1316,22 @@ module avmAppConfig 'br/public:avm/res/app-configuration/configuration-store:0.9
13161316
roleAssignments: [
13171317
{
13181318
principalId: avmContainerApp.outputs.?systemAssignedMIPrincipalId!
1319-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1319+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13201320
principalType: 'ServicePrincipal'
13211321
}
13221322
{
13231323
principalId: avmContainerApp_API.outputs.?systemAssignedMIPrincipalId!
1324-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1324+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13251325
principalType: 'ServicePrincipal'
13261326
}
13271327
{
13281328
principalId: avmContainerApp_Web.outputs.?systemAssignedMIPrincipalId!
1329-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1329+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13301330
principalType: 'ServicePrincipal'
13311331
}
13321332
{
13331333
principalId: avmContainerApp_Workflow.outputs.?systemAssignedMIPrincipalId!
1334-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1334+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13351335
principalType: 'ServicePrincipal'
13361336
}
13371337
]

infra/main.json

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@
66
"_generator": {
77
"name": "bicep",
88
"version": "0.44.1.10279",
9-
"templateHash": "3841741921827855283"
9+
"templateHash": "10450741366794216818"
1010
},
1111
"name": "Content Processing Solution Accelerator",
1212
"description": "Bicep template to deploy the Content Processing Solution Accelerator with AVM compliance."
@@ -23908,7 +23908,7 @@
2390823908
"value": [
2390923909
{
2391023910
"principalId": "[reference('avmContainerRegistryReader').outputs.principalId.value]",
23911-
"roleDefinitionIdOrName": "AcrPull",
23911+
"roleDefinitionIdOrName": "7f951dda-4ed3-4680-a7ca-43fe172d538d",
2391223912
"principalType": "ServicePrincipal"
2391323913
}
2391423914
]
@@ -28013,36 +28013,36 @@
2801328013
"value": [
2801428014
{
2801528015
"principalId": "[reference('avmManagedIdentity').outputs.principalId.value]",
28016-
"roleDefinitionIdOrName": "Storage Blob Data Contributor",
28016+
"roleDefinitionIdOrName": "ba92f5b4-2d11-453d-a403-e96b0029c9fe",
2801728017
"principalType": "ServicePrincipal"
2801828018
},
2801928019
{
28020-
"roleDefinitionIdOrName": "Storage Blob Data Contributor",
28020+
"roleDefinitionIdOrName": "ba92f5b4-2d11-453d-a403-e96b0029c9fe",
2802128021
"principalId": "[reference('avmContainerApp').outputs.systemAssignedMIPrincipalId.value]",
2802228022
"principalType": "ServicePrincipal"
2802328023
},
2802428024
{
28025-
"roleDefinitionIdOrName": "Storage Blob Data Contributor",
28025+
"roleDefinitionIdOrName": "ba92f5b4-2d11-453d-a403-e96b0029c9fe",
2802628026
"principalId": "[reference('avmContainerApp_API').outputs.systemAssignedMIPrincipalId.value]",
2802728027
"principalType": "ServicePrincipal"
2802828028
},
2802928029
{
28030-
"roleDefinitionIdOrName": "Storage Queue Data Contributor",
28030+
"roleDefinitionIdOrName": "974c5e8b-45b9-4653-ba55-5f855dd0fb88",
2803128031
"principalId": "[reference('avmContainerApp').outputs.systemAssignedMIPrincipalId.value]",
2803228032
"principalType": "ServicePrincipal"
2803328033
},
2803428034
{
28035-
"roleDefinitionIdOrName": "Storage Queue Data Contributor",
28035+
"roleDefinitionIdOrName": "974c5e8b-45b9-4653-ba55-5f855dd0fb88",
2803628036
"principalId": "[reference('avmContainerApp_API').outputs.systemAssignedMIPrincipalId.value]",
2803728037
"principalType": "ServicePrincipal"
2803828038
},
2803928039
{
28040-
"roleDefinitionIdOrName": "Storage Blob Data Contributor",
28040+
"roleDefinitionIdOrName": "ba92f5b4-2d11-453d-a403-e96b0029c9fe",
2804128041
"principalId": "[reference('avmContainerApp_Workflow').outputs.systemAssignedMIPrincipalId.value]",
2804228042
"principalType": "ServicePrincipal"
2804328043
},
2804428044
{
28045-
"roleDefinitionIdOrName": "Storage Queue Data Contributor",
28045+
"roleDefinitionIdOrName": "974c5e8b-45b9-4653-ba55-5f855dd0fb88",
2804628046
"principalId": "[reference('avmContainerApp_Workflow').outputs.systemAssignedMIPrincipalId.value]",
2804728047
"principalType": "ServicePrincipal"
2804828048
}
@@ -36185,8 +36185,8 @@
3618536185
"avmContainerApp_API",
3618636186
"avmContainerApp_Workflow",
3618736187
"avmManagedIdentity",
36188-
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageBlob)]",
3618936188
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageQueue)]",
36189+
"[format('avmPrivateDnsZones[{0}]', variables('dnsZoneIndex').storageBlob)]",
3619036190
"virtualNetwork"
3619136191
]
3619236192
},
@@ -36248,32 +36248,32 @@
3624836248
},
3624936249
{
3625036250
"principalId": "[reference('avmContainerApp').outputs.systemAssignedMIPrincipalId.value]",
36251-
"roleDefinitionIdOrName": "Cognitive Services OpenAI User",
36251+
"roleDefinitionIdOrName": "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
3625236252
"principalType": "ServicePrincipal"
3625336253
},
3625436254
{
3625536255
"principalId": "[reference('avmContainerApp').outputs.systemAssignedMIPrincipalId.value]",
36256-
"roleDefinitionIdOrName": "Azure AI Developer",
36256+
"roleDefinitionIdOrName": "64702f94-c441-49e6-a78b-ef80e0188fee",
3625736257
"principalType": "ServicePrincipal"
3625836258
},
3625936259
{
3626036260
"principalId": "[reference('avmContainerApp_Workflow').outputs.systemAssignedMIPrincipalId.value]",
36261-
"roleDefinitionIdOrName": "Cognitive Services OpenAI User",
36261+
"roleDefinitionIdOrName": "5e0bd9bd-7b93-4f28-af87-19fc36ad61bd",
3626236262
"principalType": "ServicePrincipal"
3626336263
},
3626436264
{
3626536265
"principalId": "[reference('avmContainerApp_Workflow').outputs.systemAssignedMIPrincipalId.value]",
36266-
"roleDefinitionIdOrName": "Azure AI Developer",
36266+
"roleDefinitionIdOrName": "64702f94-c441-49e6-a78b-ef80e0188fee",
3626736267
"principalType": "ServicePrincipal"
3626836268
},
3626936269
{
3627036270
"principalId": "[reference('avmContainerApp').outputs.systemAssignedMIPrincipalId.value]",
36271-
"roleDefinitionIdOrName": "Cognitive Services User",
36271+
"roleDefinitionIdOrName": "a97b65f3-24c7-4388-baec-2e87135dc908",
3627236272
"principalType": "ServicePrincipal"
3627336273
},
3627436274
{
3627536275
"principalId": "[reference('avmContainerApp_Workflow').outputs.systemAssignedMIPrincipalId.value]",
36276-
"roleDefinitionIdOrName": "Cognitive Services User",
36276+
"roleDefinitionIdOrName": "a97b65f3-24c7-4388-baec-2e87135dc908",
3627736277
"principalType": "ServicePrincipal"
3627836278
}
3627936279
]
@@ -56778,22 +56778,22 @@
5677856778
"value": [
5677956779
{
5678056780
"principalId": "[tryGet(tryGet(reference('avmContainerApp').outputs, 'systemAssignedMIPrincipalId'), 'value')]",
56781-
"roleDefinitionIdOrName": "App Configuration Data Reader",
56781+
"roleDefinitionIdOrName": "516239f1-63e1-4d78-a4de-a74fb236a071",
5678256782
"principalType": "ServicePrincipal"
5678356783
},
5678456784
{
5678556785
"principalId": "[tryGet(tryGet(reference('avmContainerApp_API').outputs, 'systemAssignedMIPrincipalId'), 'value')]",
56786-
"roleDefinitionIdOrName": "App Configuration Data Reader",
56786+
"roleDefinitionIdOrName": "516239f1-63e1-4d78-a4de-a74fb236a071",
5678756787
"principalType": "ServicePrincipal"
5678856788
},
5678956789
{
5679056790
"principalId": "[tryGet(tryGet(reference('avmContainerApp_Web').outputs, 'systemAssignedMIPrincipalId'), 'value')]",
56791-
"roleDefinitionIdOrName": "App Configuration Data Reader",
56791+
"roleDefinitionIdOrName": "516239f1-63e1-4d78-a4de-a74fb236a071",
5679256792
"principalType": "ServicePrincipal"
5679356793
},
5679456794
{
5679556795
"principalId": "[tryGet(tryGet(reference('avmContainerApp_Workflow').outputs, 'systemAssignedMIPrincipalId'), 'value')]",
56796-
"roleDefinitionIdOrName": "App Configuration Data Reader",
56796+
"roleDefinitionIdOrName": "516239f1-63e1-4d78-a4de-a74fb236a071",
5679756797
"principalType": "ServicePrincipal"
5679856798
}
5679956799
]

infra/main_custom.bicep

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -595,7 +595,7 @@ module avmContainerRegistry 'modules/container-registry.bicep' = {
595595
roleAssignments: [
596596
{
597597
principalId: avmContainerRegistryReader.outputs.principalId
598-
roleDefinitionIdOrName: 'AcrPull'
598+
roleDefinitionIdOrName: '7f951dda-4ed3-4680-a7ca-43fe172d538d' //'AcrPull'
599599
principalType: 'ServicePrincipal'
600600
}
601601
]
@@ -623,26 +623,26 @@ module avmStorageAccount 'br/public:avm/res/storage/storage-account:0.32.0' = {
623623
roleAssignments: [
624624
{
625625
principalId: avmManagedIdentity.outputs.principalId
626-
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
626+
roleDefinitionIdOrName: 'ba92f5b4-2d11-453d-a403-e96b0029c9fe' //'Storage Blob Data Contributor'
627627
principalType: 'ServicePrincipal'
628628
}
629629
{
630-
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
630+
roleDefinitionIdOrName: 'ba92f5b4-2d11-453d-a403-e96b0029c9fe' //'Storage Blob Data Contributor'
631631
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
632632
principalType: 'ServicePrincipal'
633633
}
634634
{
635-
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
635+
roleDefinitionIdOrName: 'ba92f5b4-2d11-453d-a403-e96b0029c9fe' //'Storage Blob Data Contributor'
636636
principalId: avmContainerApp_API.outputs.systemAssignedMIPrincipalId!
637637
principalType: 'ServicePrincipal'
638638
}
639639
{
640-
roleDefinitionIdOrName: 'Storage Queue Data Contributor'
640+
roleDefinitionIdOrName: '974c5e8b-45b9-4653-ba55-5f855dd0fb88' //'Storage Queue Data Contributor'
641641
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
642642
principalType: 'ServicePrincipal'
643643
}
644644
{
645-
roleDefinitionIdOrName: 'Storage Queue Data Contributor'
645+
roleDefinitionIdOrName: '974c5e8b-45b9-4653-ba55-5f855dd0fb88' //'Storage Queue Data Contributor'
646646
principalId: avmContainerApp_API.outputs.systemAssignedMIPrincipalId!
647647
principalType: 'ServicePrincipal'
648648
}
@@ -652,7 +652,7 @@ module avmStorageAccount 'br/public:avm/res/storage/storage-account:0.32.0' = {
652652
principalType: 'ServicePrincipal'
653653
}
654654
{
655-
roleDefinitionIdOrName: 'Storage Queue Data Contributor'
655+
roleDefinitionIdOrName: '974c5e8b-45b9-4653-ba55-5f855dd0fb88' //'Storage Queue Data Contributor'
656656
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
657657
principalType: 'ServicePrincipal'
658658
}
@@ -732,32 +732,32 @@ module avmAiServices 'modules/account/aifoundry.bicep' = {
732732
}
733733
{
734734
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
735-
roleDefinitionIdOrName: 'Cognitive Services OpenAI User'
735+
roleDefinitionIdOrName: '5e0bd9bd-7b93-4f28-af87-19fc36ad61bd' //'Cognitive Services OpenAI User'
736736
principalType: 'ServicePrincipal'
737737
}
738738
{
739739
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
740-
roleDefinitionIdOrName: 'Azure AI Developer'
740+
roleDefinitionIdOrName: '64702f94-c441-49e6-a78b-ef80e0188fee' //'Azure AI Developer'
741741
principalType: 'ServicePrincipal'
742742
}
743743
{
744744
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
745-
roleDefinitionIdOrName: 'Cognitive Services OpenAI User'
745+
roleDefinitionIdOrName: '5e0bd9bd-7b93-4f28-af87-19fc36ad61bd' //'Cognitive Services OpenAI User'
746746
principalType: 'ServicePrincipal'
747747
}
748748
{
749749
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
750-
roleDefinitionIdOrName: 'Azure AI Developer'
750+
roleDefinitionIdOrName: '64702f94-c441-49e6-a78b-ef80e0188fee' //'Azure AI Developer'
751751
principalType: 'ServicePrincipal'
752752
}
753753
{
754754
principalId: avmContainerApp.outputs.systemAssignedMIPrincipalId!
755-
roleDefinitionIdOrName: 'Cognitive Services User'
755+
roleDefinitionIdOrName: 'a97b65f3-24c7-4388-baec-2e87135dc908' //'Cognitive Services User'
756756
principalType: 'ServicePrincipal'
757757
}
758758
{
759759
principalId: avmContainerApp_Workflow.outputs.systemAssignedMIPrincipalId!
760-
roleDefinitionIdOrName: 'Cognitive Services User'
760+
roleDefinitionIdOrName: 'a97b65f3-24c7-4388-baec-2e87135dc908' //'Cognitive Services User'
761761
principalType: 'ServicePrincipal'
762762
}
763763
]
@@ -1340,22 +1340,22 @@ module avmAppConfig 'br/public:avm/res/app-configuration/configuration-store:0.9
13401340
roleAssignments: [
13411341
{
13421342
principalId: avmContainerApp.outputs.?systemAssignedMIPrincipalId!
1343-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1343+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13441344
principalType: 'ServicePrincipal'
13451345
}
13461346
{
13471347
principalId: avmContainerApp_API.outputs.?systemAssignedMIPrincipalId!
1348-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1348+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13491349
principalType: 'ServicePrincipal'
13501350
}
13511351
{
13521352
principalId: avmContainerApp_Web.outputs.?systemAssignedMIPrincipalId!
1353-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1353+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13541354
principalType: 'ServicePrincipal'
13551355
}
13561356
{
13571357
principalId: avmContainerApp_Workflow.outputs.?systemAssignedMIPrincipalId!
1358-
roleDefinitionIdOrName: 'App Configuration Data Reader'
1358+
roleDefinitionIdOrName: '516239f1-63e1-4d78-a4de-a74fb236a071' //'App Configuration Data Reader'
13591359
principalType: 'ServicePrincipal'
13601360
}
13611361
]

0 commit comments

Comments
 (0)