Add PowerShell setup instructions and enhance sample data processing scripts

- Added PowerShell installation instructions for Windows users in README.md.
- Updated process_sample_data.sh to include Cosmos DB account and resource group as parameters.
- Created add_cosmosdb_access.sh to manage Cosmos DB role assignments.
- Enhanced run_create_index_scripts.sh with Azure authentication checks.
- Updated main.bicep to output Cosmos DB account and resource group names.

Author: Harsh-Microsoft

README.md

@@ -138,6 +138,7 @@ If you're not using one of the above options for opening the project, then you'l
     * [Python 3.9+](https://www.python.org/downloads/)
     * [Docker Desktop](https://www.docker.com/products/docker-desktop/)
     * [Git](https://git-scm.com/downloads)
+    * [Powershell](https://learn.microsoft.com/en-us/powershell/scripting/install/installing-powershell-on-windows?view=powershell-7.5) (Required for Windows users only. Follow the steps [here](./docs/PowershellSetup.md) to add it to the Windows PATH.)
 
 2. Download the project code:
 
@@ -194,7 +195,7 @@ To change the azd parameters from the default values, follow the steps [here](./
 
 5. Once the deployment has completed successfully and you would like to use the sample data, run the bash command printed in the terminal. The bash command will look like the following: 
     ```shell 
-    ./infra/scripts/process_sample_data.sh <Storage-Account-name> <Storgae-Account-container-name> <Key-Vault-name>
+    bash ./infra/scripts/process_sample_data.sh <Storage-Account-name> <Storgae-Account-container-name> <Key-Vault-name> <CosmosDB-Account-name> <Resource-Group-name>
     ```
 
 6. Open the [Azure Portal](https://portal.azure.com/), go to the deployed resource group, find the App Service and get the app URL from `Default domain`.

azure.yaml

@@ -32,7 +32,7 @@ hooks:
         Write-Host "Web app URL: "
         Write-Host "$env:WEB_APP_URL" -ForegroundColor Cyan
         Write-Host "`nIf you want to use the Sample Data, run the following command in the Bash terminal to process it:"
-        Write-Host "bash ./infra/scripts/process_sample_data.sh $env:STORAGE_ACCOUNT_NAME $env:STORAGE_CONTAINER_NAME $env:KEY_VAULT_NAME" -ForegroundColor Cyan
+        Write-Host "bash ./infra/scripts/process_sample_data.sh $env:STORAGE_ACCOUNT_NAME $env:STORAGE_CONTAINER_NAME $env:KEY_VAULT_NAME $env:COSMOSDB_ACCOUNT_NAME $env:RESOURCE_GROUP_NAME" -ForegroundColor Cyan
       shell: pwsh
       continueOnError: false
       interactive: true
@@ -42,7 +42,7 @@ hooks:
         echo $WEB_APP_URL
         echo ""
         echo "If you want to use the Sample Data, run the following command in the terminal to process it:"
-        echo "bash ./infra/scripts/process_sample_data.sh $STORAGE_ACCOUNT_NAME $STORAGE_CONTAINER_NAME $KEY_VAULT_NAME"
+        echo "bash ./infra/scripts/process_sample_data.sh $STORAGE_ACCOUNT_NAME $STORAGE_CONTAINER_NAME $KEY_VAULT_NAME $COSMOSDB_ACCOUNT_NAME $RESOURCE_GROUP_NAME"
       shell: sh
       continueOnError: false
       interactive: true

docs/PowershellSetup.md

@@ -0,0 +1,45 @@
+# Add PowerShell 7 to PATH in Windows
+
+This guide will help you add **PowerShell 7** (PowerShell Core) to your system’s PATH variable on Windows, so you can easily run it from any Command Prompt or Run dialog.
+
+## Prerequisites
+
+- You should have **PowerShell 7** installed on your machine. If you haven’t installed it yet, you can download it following the guide here: [Installing PowerShell on Windows | Microsoft Learn](https://learn.microsoft.com/en-us/powershell/scripting/install/installing-powershell-on-windows?view=powershell-7.5).
+- **Administrative privileges are not required** unless you're modifying system-wide environment variables. You can modify your **user-specific PATH** without admin rights.
+
+## Steps to Add PowerShell 7 to PATH
+
+### 1. Open **System Properties**
+   - Press `Win + X` and choose **System**.
+   - Click on **Advanced system settings** on the left sidebar. This will open the **System Properties** window.
+   - In the **System Properties** window, click on the **Environment Variables** button at the bottom.
+
+### 2. Edit User Environment Variables
+   - In the **Environment Variables** window, under **User variables**, find the `Path` variable.
+   - Select the `Path` variable and click **Edit**. (If the `Path` variable doesn’t exist, click **New** and name it `Path`.)
+
+### 3. Check if PowerShell 7 Path is Already in PATH
+   - Before adding the path, make sure the following path is not already present in the list:
+     ```
+     C:\Program Files\PowerShell\7\
+     ```
+   - If the path is already there, you don't need to add it again.
+### 4. Add PowerShell 7 Path
+   - If the path is not already in the list, click **New** in the **Edit Environment Variable** window.
+   - Add the following path to the list:
+     ```
+     C:\Program Files\PowerShell\7\
+     ```
+   > **Note:** If you installed PowerShell 7 in a custom location, replace the above path with the correct one.
+### 5. Save Changes
+   - After adding the path, click **OK** to close the **Edit Environment Variable** window.
+   - Click **OK** again to close the **Environment Variables** window.
+   - Finally, click **OK** to exit the **System Properties** window.
+### 6. Verify PowerShell 7 in PATH
+   - Open **Command Prompt** or **Run** (press `Win + R`).
+   - Type `pwsh` and press Enter.
+   - If PowerShell 7 opens, you've successfully added it to your PATH!
+---
+## Troubleshooting
+- **PowerShell 7 not opening:** Ensure the path to PowerShell 7 is entered correctly. If you're using a custom installation folder, check that the correct path is added to the `Path` variable.
+- **Changes not taking effect:** Try restarting your computer or logging out and logging back in for the changes to apply.

infra/main.bicep

@@ -430,6 +430,8 @@ module cosmosDBModule 'deploy_cosmos_db.bicep' = {
 output STORAGE_ACCOUNT_NAME string = storageAccount.outputs.storageName
 output STORAGE_CONTAINER_NAME string = storageAccount.outputs.storageContainer
 output KEY_VAULT_NAME string = kvault.outputs.keyvaultName
+output COSMOSDB_ACCOUNT_NAME string = cosmosDBModule.outputs.cosmosAccountName
+output RESOURCE_GROUP_NAME string = resourceGroup().name
 
 
 // //========== Deployment script to upload sample data ========== //

infra/scripts/add_cosmosdb_access.sh

@@ -0,0 +1,50 @@
+#!/bin/bash
+
+# Variables
+resource_group="$1"
+account_name="$2"
+
+# Authenticate with Azure
+if az account show &> /dev/null; then
+    echo "Already authenticated with Azure."
+else
+    if [ -n "$managedIdentityClientId" ]; then
+        # Use managed identity if running in Azure
+        echo "Authenticating with Managed Identity..."
+        az login --identity --client-id ${managedIdentityClientId}
+    else
+        # Use Azure CLI login if running locally
+        echo "Authenticating with Azure CLI..."
+        az login
+    fi
+    echo "Not authenticated with Azure. Attempting to authenticate..."
+fi
+
+echo "Getting signed in user id"
+signed_user_id=$(az ad signed-in-user show --query id -o tsv)
+
+# Check if the user has the Cosmos DB Built-in Data Contributor role
+echo "Checking if user has the Cosmos DB Built-in Data Contributor role"
+roleExists=$(az cosmosdb sql role assignment list \
+    --resource-group $resource_group \
+    --account-name $account_name \
+    --query "[?roleDefinitionId.ends_with(@, '00000000-0000-0000-0000-000000000002') && principalId == '$signed_user_id']" -o tsv)
+
+# Check if the role exists
+if [ -n "$roleExists" ]; then
+    echo "User already has the Cosmos DB Built-in Data Contributer role."
+else
+    echo "User does not have the Cosmos DB Built-in Data Contributer role. Assigning the role."
+    MSYS_NO_PATHCONV=1 az cosmosdb sql role assignment create \
+        --resource-group $resource_group \
+        --account-name $account_name \
+        --role-definition-id 00000000-0000-0000-0000-000000000002 \
+        --principal-id $signed_user_id \
+        --scope "/" \
+        --output none
+    if [ $? -eq 0 ]; then
+        echo "Cosmos DB Built-in Data Contributer role assigned successfully."
+    else
+        echo "Failed to assign Cosmos DB Built-in Data Contributer role."
+    fi
+fi

infra/scripts/process_sample_data.sh

@@ -4,14 +4,25 @@
 storageAccount="$1"
 fileSystem="$2"
 keyvaultName="$3"
-managedIdentityClientId="$4"
+cosmosDbAccountName="$4"
+resourceGroupName="$5"
+managedIdentityClientId="$6"
 
 # Check if all required arguments are provided
-if [ -z "$storageAccount" ] || [ -z "$fileSystem" ] || [ -z "$keyvaultName" ]; then
-    echo "Usage: $0 <storageAccount> <fileSystem> <keyvaultName> [managedIdentityClientId]"
+if [ -z "$storageAccount" ] || [ -z "$fileSystem" ] || [ -z "$keyvaultName" ] || [ -z "$cosmosDbAccountName" ] || [ -z "$resourceGroupName" ]; then
+    echo "Usage: $0 <storageAccount> <fileSystem> <keyvaultName> <cosmosDbAccountName> <resourceGroupName> [managedIdentityClientId]"
     exit 1
 fi
 
+# Call add_cosmosdb_access.sh
+echo "Running add_cosmosdb_access.sh"
+bash infra/scripts/add_cosmosdb_access.sh "$resourceGroupName" "$cosmosDbAccountName" "$managedIdentityClientId"
+if [ $? -ne 0 ]; then
+    echo "Error: add_cosmosdb_access.sh failed."
+    exit 1
+fi
+echo "add_cosmosdb_access.sh completed successfully."
+
 # Call copy_kb_files.sh
 echo "Running copy_kb_files.sh"
 bash infra/scripts/copy_kb_files.sh "$storageAccount" "$fileSystem" "$managedIdentityClientId"

infra/scripts/run_create_index_scripts.sh

@@ -1,5 +1,4 @@
 #!/bin/bash
-echo "started the script"
 
 # Variables
 # baseUrl="$1"
@@ -10,6 +9,22 @@ managedIdentityClientId="$2"
 
 echo "Script Started"
 
+# Authenticate with Azure
+if az account show &> /dev/null; then
+    echo "Already authenticated with Azure."
+else
+    if [ -n "$managedIdentityClientId" ]; then
+        # Use managed identity if running in Azure
+        echo "Authenticating with Managed Identity..."
+        az login --identity --client-id ${managedIdentityClientId}
+    else
+        # Use Azure CLI login if running locally
+        echo "Authenticating with Azure CLI..."
+        az login
+    fi
+    echo "Not authenticated with Azure. Attempting to authenticate..."
+fi
+
 echo "Getting signed in user id"
 signed_user_id=$(az ad signed-in-user show --query id -o tsv)