Add principalType property for role assignment in Bicep and JSON templates

Abdul-Microsoft · Abdul-Microsoft · commit 71fc03c134e2 · 2025-07-18T15:28:25.000+05:30
diff --git a/infra/deploy_app_service.bicep b/infra/deploy_app_service.bicep
@@ -332,6 +332,7 @@ resource searchIndexDataReaderAssignment 'Microsoft.Authorization/roleAssignment
   properties: {
     roleDefinitionId: searchIndexDataReader.id
     principalId: Website.identity.principalId
+    principalType: 'ServicePrincipal'
   }
 }
 
diff --git a/infra/main.json b/infra/main.json
@@ -2078,7 +2078,8 @@
               "name": "[guid(parameters('WebsiteName'), parameters('aiSearchName'), resourceId('Microsoft.Authorization/roleDefinitions', '1407120a-92aa-4202-b7e9-c0e197c71c8f'))]",
               "properties": {
                 "roleDefinitionId": "[resourceId('Microsoft.Authorization/roleDefinitions', '1407120a-92aa-4202-b7e9-c0e197c71c8f')]",
-                "principalId": "[reference(resourceId('Microsoft.Web/sites', parameters('WebsiteName')), '2020-06-01', 'full').identity.principalId]"
+                "principalId": "[reference(resourceId('Microsoft.Web/sites', parameters('WebsiteName')), '2020-06-01', 'full').identity.principalId]",
+                "principalType": "ServicePrincipal"
               },
               "dependsOn": [
                 "[resourceId('Microsoft.Web/sites', parameters('WebsiteName'))]"

Original file line number	Diff line number	Diff line change
`@@ -332,6 +332,7 @@ resource searchIndexDataReaderAssignment 'Microsoft.Authorization/roleAssignment`
`332`	`332`	`properties: {`
`333`	`333`	`roleDefinitionId: searchIndexDataReader.id`
`334`	`334`	`principalId: Website.identity.principalId`
	`335`	`+ principalType: 'ServicePrincipal'`
`335`	`336`	`}`
`336`	`337`	`}`
`337`	`338`