Merge pull request #17336 from hungry1526/main

update terraform doc

Author: prmerger-automator[bot]

AKS-Arc/create-clusters-terraform.md

@@ -70,11 +70,11 @@ az login
     required_providers { 
       azapi = { 
         source  = "azure/azapi" 
-        version = "~> 1.13" 
+        version = "~> 2.0" 
       } 
       azurerm = { 
        source  = "hashicorp/azurerm" 
-       version = "~> 3.74" 
+       version = "~> 4.0" 
       } 
      }
     }
@@ -88,13 +88,13 @@ az login
    }
    ```
 
-1. Create another file named **main.tf** that points to the latest AKS Arc AVM module, and insert the following code. You can read the description and input of the module and add optional parameters as needed. To find the admin group object ID, see [Enable Microsoft Entra authentication for Kubernetes clusters](enable-authentication-microsoft-entra-id.md). You can [follow this guidance](https://github.com/Azure/Edge-infrastructure-quickstart-template/blob/main/doc/AKS-Arc-Admin-Groups.md) to find it in your Azure environment.
+1. Create another file named **main.tf** that points to the latest AKS Arc AVM module, and insert the following code. You can read the description and input of the module and add optional parameters as needed. To find the admin group object ID, see [Enable Microsoft Entra authentication for Kubernetes clusters](enable-authentication-microsoft-entra-id.md). You can [follow this guidance](https://github.com/Azure/Edge-infrastructure-quickstart-template/blob/main/doc/AKS-Arc-Admin-Groups.md) to find it in your Azure environment. To enable Azure RBAC, update the corresponding parameter and see [Enable Azure RBAC for Kubernetes Authorization](azure-rbac-23h2.md) for prerequisites.
 
    ```terraform
    module "aks_arc" { 
    # Make sure to use the latest AVM module version
    source = "Azure/avm-res-hybridcontainerservice-provisionedclusterinstance/azurerm" 
-   version = "~>0.6"
+   version = "~>2.0"
 
    # Make sure to provide all required parameters  
    resource_group_id = "<Resource_Group>" 
@@ -106,6 +106,7 @@ az login
    ssh_public_key =  "Your_SSH_Key"
 
    # Optional parameters, update them as needed
+   enable_azure_rbac = false
    enable_workload_identity = false 
    enable_oidc_issuer = false 
    rbac_admin_group_object_ids = ["<Admin_Group_Object_ID>"]
@@ -114,7 +115,7 @@ az login
 
 ## Initialize Terraform
 
-Run [`terraform init`](https://www.terraform.io/docs/commands/init.html) to initialize the Terraform deployment. Make sure to use the `-upgrade` flag to upgrade the necessary provider plugins to the latest version:
+Run [`terraform init`](https://www.terraform.io/docs/commands/init.html) to initialize the Terraform deployment. Make sure to use the `-upgrade` flag to upgrade the necessary provider plugins to the latest version:
 
 ```terraform
 terraform init -upgrade