Azure / Azure-Verified-Modules

Azure Verified Modules (AVM) is an initiative to consolidate and set the standards for what a good Infrastructure-as-Code module looks like. Modules will then align to these standards, across languages (Bicep, Terraform etc.) and will then be classified as AVMs and available from their respective language specific registries.

Home Page:https://aka.ms/AVM

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[Module Proposal]: `Microsoft.Authorization/roleAssignments`

darrenFrowen opened this issue · comments

Check for previous/existing GitHub issues/module proposals

  • I have checked for previous/existing GitHub issues/module proposals.

Check this module doesn't already exist in the module indexes

  • I have checked for that this module doesn't already exist in the module indexes.

Bicep or Terraform?

Bicep

Module Classification?

Resource Module

Module Name

role-assignments

Module Details

Hi,

Although each resource has options to add 'Microsoft.Authorization/roleAssignments' to each resource, there maybe a requirement where the role assignment is required at the subscription scope and as such there doesn't seem to be an option for this as a standalone resource to be able to perform that operation.

Do you want to be the owner of this module?

No

Module Owner's GitHub Username (handle)

No response

(Optional) Secondary Module Owner's GitHub Username (handle)

No response

Important

The "Needs: Triage 🔍" label must be removed once the triage process is complete!

Tip

For additional guidance on how to triage this issue/PR, see the AVM Issue Triage documentation.

@darrenFrowen, thanks for submitting this module proposal!

Important

The AVM core team will review it and will try to find a module owner.

Hi @darrenFrowen,

Please note that the following authorization related pattern modules are already available:

  • variable scope role assignment (for resource group, subscription, management group level assignments), here
  • resource level role assignment, here

As this proposal seems redundant with these existing modules, I'm closing it now. Please feel free to reopen it if you have further comments/questions. Thank you!