feat/app-services-entra-id-group-memberships

patrickmoore-nc · patrickmoore-nc · commit 483cf63600f4 · 2025-04-25T12:44:44.000+01:00
diff --git a/infrastructure/modules/function-app/entra_id_group.tf b/infrastructure/modules/function-app/entra_id_group.tf
@@ -0,0 +1,6 @@
+resource "azuread_group_member" "function_app" {
+  for_each = var.entra_id_group_ids
+
+  group_object_id  = each.key
+  member_object_id = azurerm_linux_function_app.function_app.identity.0.principal_id
+}
diff --git a/infrastructure/modules/function-app/variables.tf b/infrastructure/modules/function-app/variables.tf
@@ -52,6 +52,11 @@ variable "cors_allowed_origins" {
   default = [""]
 }
 
+variable "entra_id_group_ids" {
+  type    = list(string)
+  default = []
+}
+
 variable "ftp_publish_basic_authentication_enabled" {
   type        = bool
   description = "Enable basic authentication for FTP. Defaults to false."
