Skip to content

Commit af8464f

Browse files
committed
[AzureADDS] Add parameters definition snippet
1 parent e8c1d40 commit af8464f

File tree

1 file changed

+45
-16
lines changed

1 file changed

+45
-16
lines changed

articles/active-directory-domain-services/template-create-instance.md

Lines changed: 45 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -125,27 +125,56 @@ As part of the Resource Manager resource definition, the following configuration
125125
* **notificationSettings** - If there are any alerts generated in the Azure AD DS managed domain, email notifications can be sent out. *Global administrators* of the Azure tenant and members of the *AAD DC Administrators* group can be *Enabled* for these notifications.
126126
* If desired, you can add additional recipients for notifications when there are alerts that require attention.
127127

128-
The following Resource Manager template resource type is used to define and create the Azure AD DS managed domain. An Azure virtual network and subnet must already exist, or be created as part of Resource Manager template. The Azure AD DS managed domain is connected to this subnet.
128+
The following condensed parameters definition shows how these values are declared:
129129

130130
```json
131-
{
132-
"apiVersion": "2017-06-01",
133-
"type": "Microsoft.AAD/DomainServices",
134-
"name": "[parameters('domainName')]",
135-
"location": "[parameters('location')]",
136-
"dependsOn": [
137-
"[concat('Microsoft.Network/virtualNetworks/', parameters('vnetName'))]"
138-
],
139-
"properties": {
140-
"domainName": "[parameters('domainName')]",
141-
"subnetId": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/virtualNetworks/', parameters('vnetName'), '/subnets/', parameters('subnetName'))]",
142-
"filteredSync": "[parameters('filteredSync')]",
143-
"domainConfigurationType": "[parameters('domainConfigurationType')]",
144-
"notificationSettings": "[parameters('notificationSettings')]"
145-
}
131+
"parameters": {
132+
"domainConfigurationType": {
133+
"value": "FullySynced"
134+
},
135+
"domainName": {
136+
"value": "aadds.contoso.com"
137+
},
138+
"filteredSync": {
139+
"value": "Disabled"
140+
},
141+
"notificationSettings": {
142+
"value": {
143+
"notifyGlobalAdmins": "Enabled",
144+
"notifyDcAdmins": "Enabled",
145+
"additionalRecipients": []
146+
}
147+
},
148+
[...]
146149
}
147150
```
148151

152+
The following condensed Resource Manager template resource type is then used to define and create the Azure AD DS managed domain. An Azure virtual network and subnet must already exist, or be created as part of Resource Manager template. The Azure AD DS managed domain is connected to this subnet.
153+
154+
```json
155+
"resources": [
156+
{
157+
"apiVersion": "2017-06-01",
158+
"type": "Microsoft.AAD/DomainServices",
159+
"name": "[parameters('domainName')]",
160+
"location": "[parameters('location')]",
161+
"dependsOn": [
162+
"[concat('Microsoft.Network/virtualNetworks/', parameters('vnetName'))]"
163+
],
164+
"properties": {
165+
"domainName": "[parameters('domainName')]",
166+
"subnetId": "[concat('/subscriptions/', subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Network/virtualNetworks/', parameters('vnetName'), '/subnets/', parameters('subnetName'))]",
167+
"filteredSync": "[parameters('filteredSync')]",
168+
"domainConfigurationType": "[parameters('domainConfigurationType')]",
169+
"notificationSettings": "[parameters('notificationSettings')]"
170+
}
171+
},
172+
[...]
173+
]
174+
```
175+
176+
These parameters and resource type can be used as part of a wider Resource Manager template to deploy a managed domain, as shown in the following section.
177+
149178
## Create a managed domain using sample template
150179

151180
The following complete Resource Manager sample template creates an Azure AD DS managed domain and the supporting virtual network, subnet, and network security group rules. The network security group rules are required to secure the managed domain and make sure traffic can flow correctly.

0 commit comments

Comments
 (0)