Skip to content

Commit 923dda1

Browse files
Merge pull request #253210 from mbrat2005/avmn-bicep-uami-clarity
AVNM Bicep: Add Details on Deployment Script Identity
2 parents e8e3694 + 1341ecf commit 923dda1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/virtual-network-manager/create-virtual-network-manager-bicep.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -123,7 +123,7 @@ resource connectivityConfigurationMesh 'Microsoft.Network/networkManagers/connec
123123

124124
#### Deployment Script
125125

126-
In order to deploy the configuration to the target network group, a Deployment Script is used to call the `Deploy-AzNetworkManagerCommit` PowerShell command. In addition to the Deployment Script, a User Assigned Identity is created and granted the 'Contributor' role on the target resources group.
126+
In order to deploy the configuration to the target network group, a Deployment Script is used to call the `Deploy-AzNetworkManagerCommit` PowerShell command. The Deployment Script needs an identity with sufficient permissions to execute the PowerShell script against the Virtual Network Manager, so the Bicep template creates a User Managed Identity and grants it the 'Contributor' role on the target resource group. For more information on Deployment Scripts and associated identities, see [Use deployment scripts in ARM templates](../azure-resource-manager/templates/deployment-script-template.md).
127127

128128
```bicep
129129
@description('Create a Deployment Script resource to perform the commit/deployment of the Network Manager connectivity configuration.')

0 commit comments

Comments
 (0)