Skip to content

Commit 7169953

Browse files
authored
Merge pull request #188342 from tfitzmac/0211guid
use guid function for name
2 parents b97e8e5 + 393d962 commit 7169953

File tree

1 file changed

+3
-8
lines changed

1 file changed

+3
-8
lines changed

articles/azure-resource-manager/bicep/scope-extension-resources.md

Lines changed: 3 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Scope on extension resource types (Bicep)
33
description: Describes how to use the scope property when deploying extension resource types with Bicep.
44
ms.topic: conceptual
5-
ms.date: 02/07/2022
5+
ms.date: 02/11/2022
66
---
77

88
# Set scope for extension resources in Bicep
@@ -52,17 +52,14 @@ param principalId string
5252
@description('Built-in role to assign')
5353
param builtInRoleType string
5454
55-
@description('The role assignment name')
56-
param roleNameGuid string
57-
5855
var role = {
5956
Owner: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635'
6057
Contributor: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c'
6158
Reader: '/subscriptions/${subscription().subscriptionId}/providers/Microsoft.Authorization/roleDefinitions/acdd72a7-3385-48ef-bd42-f606fba81ae7'
6259
}
6360
6461
resource roleAssignSub 'Microsoft.Authorization/roleAssignments@2020-04-01-preview' = {
65-
name: roleNameGuid
62+
name: guid(subscription().id, principalId, role[builtInRoleType])
6663
properties: {
6764
roleDefinitionId: role[builtInRoleType]
6865
principalId: principalId
@@ -88,8 +85,6 @@ param principalId string
8885
@description('Built-in role to assign')
8986
param builtInRoleType string
9087
91-
@description('A new GUID used to identify the role assignment')
92-
param roleNameGuid string = newGuid()
9388
param location string = resourceGroup().location
9489
9590
var role = {
@@ -110,7 +105,7 @@ resource demoStorageAcct 'Microsoft.Storage/storageAccounts@2019-04-01' = {
110105
}
111106
112107
resource roleAssignStorage 'Microsoft.Authorization/roleAssignments@2020-04-01-preview' = {
113-
name: roleNameGuid
108+
name: guid(demoStorageAcct.id, principalId, role[builtInRoleType])
114109
properties: {
115110
roleDefinitionId: role[builtInRoleType]
116111
principalId: principalId

0 commit comments

Comments
 (0)