Skip to content

Commit 135f0be

Browse files
Use deployerPrincipalType for role assignments
1 parent 8d6cfe2 commit 135f0be

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

infra/main.bicep

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -225,6 +225,7 @@ var allTags = union(
225225
)
226226
@description('Tag, Created by user name')
227227
param createdBy string = contains(deployer(), 'userPrincipalName')? split(deployer().userPrincipalName, '@')[0]: deployer().objectId
228+
var deployerPrincipalType = contains(deployer(), 'userPrincipalName')? 'User' : 'ServicePrincipal'
228229

229230
resource resourceGroupTags 'Microsoft.Resources/tags@2021-04-01' = {
230231
name: 'default'
@@ -1262,12 +1263,12 @@ module aiFoundryAiServices 'br:mcr.microsoft.com/bicep/avm/res/cognitive-service
12621263
{
12631264
roleDefinitionIdOrName: '53ca6127-db72-4b80-b1b0-d745d6d5456d' // Azure AI User
12641265
principalId: deployingUserPrincipalId
1265-
principalType: 'User'
1266+
principalType: deployerPrincipalType
12661267
}
12671268
{
12681269
roleDefinitionIdOrName: '64702f94-c441-49e6-a78b-ef80e0188fee' // Azure AI Developer
12691270
principalId: deployingUserPrincipalId
1270-
principalType: 'User'
1271+
principalType: deployerPrincipalType
12711272
}
12721273
]
12731274
// WAF aligned configuration for Monitoring
@@ -1856,7 +1857,7 @@ module avmStorageAccount 'br/public:avm/res/storage/storage-account:0.20.0' = {
18561857
{
18571858
principalId: deployingUserPrincipalId
18581859
roleDefinitionIdOrName: 'Storage Blob Data Contributor'
1859-
principalType: 'User'
1860+
principalType: deployerPrincipalType
18601861
}
18611862
]
18621863

@@ -1943,7 +1944,7 @@ module searchService 'br/public:avm/res/search/search-service:0.11.1' = {
19431944
{
19441945
principalId: deployingUserPrincipalId
19451946
roleDefinitionIdOrName: 'Search Index Data Contributor'
1946-
principalType: 'User'
1947+
principalType: deployerPrincipalType
19471948
}
19481949
{
19491950
principalId: aiFoundryAiProjectPrincipalId

0 commit comments

Comments
 (0)