2
2
title : Scope on extension resource types (Bicep)
3
3
description : Describes how to use the scope property when deploying extension resource types with Bicep.
4
4
ms.topic : conceptual
5
- ms.date : 02/07 /2022
5
+ ms.date : 02/11 /2022
6
6
---
7
7
8
8
# Set scope for extension resources in Bicep
@@ -52,17 +52,14 @@ param principalId string
52
52
@description('Built-in role to assign')
53
53
param builtInRoleType string
54
54
55
- @description('The role assignment name')
56
- param roleNameGuid string
57
-
58
55
var role = {
59
56
Owner: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635'
60
57
Contributor: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c'
61
58
Reader: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7'
62
59
}
63
60
64
61
resource roleAssignSub 'Microsoft.Authorization/roleAssignments@2020-04-01-preview' = {
65
- name: roleNameGuid
62
+ name: guid(subscription().id, principalId, role[builtInRoleType])
66
63
properties: {
67
64
roleDefinitionId: role[builtInRoleType]
68
65
principalId: principalId
@@ -88,8 +85,6 @@ param principalId string
88
85
@description('Built-in role to assign')
89
86
param builtInRoleType string
90
87
91
- @description('A new GUID used to identify the role assignment')
92
- param roleNameGuid string = newGuid()
93
88
param location string = resourceGroup().location
94
89
95
90
var role = {
@@ -110,7 +105,7 @@ resource demoStorageAcct 'Microsoft.Storage/storageAccounts@2019-04-01' = {
110
105
}
111
106
112
107
resource roleAssignStorage 'Microsoft.Authorization/roleAssignments@2020-04-01-preview' = {
113
- name: roleNameGuid
108
+ name: guid(demoStorageAcct.id, principalId, role[builtInRoleType])
114
109
properties: {
115
110
roleDefinitionId: role[builtInRoleType]
116
111
principalId: principalId
0 commit comments