How do I find a resource association IDs for groups in Access Packages?

Question

I'm trying to import Azure AD access package resource package associations following the Terraform instructions here: Terraform guide. In the import instructions, it says I need a "resource association ID" however, I can't find any documentation on where I can find this ID.

I was able to list groups associated with Access Packages following this Microsoft Graph documentation, but the output contains multiple id's for each group. It's unclear which id I should use for the required "resource association ID". Could you help me understand what this ID is and how I can find it?

Thank you!

Answer 1

@Joseph Leiber

Thank you for your time and patience. From above description I was able to understand that you are looking for ResourceAssociationID to import in below format:

terraform import azuread_access_package_resource_package_association.example 00000000-0000-0000-0000-000000000000/11111111-1111-1111-1111-111111111111_22222222-2222-2222-2222-22222222/33333333-3333-3333-3333-33333333/Member

Please do correct me by responding in comments section if this is not the case.

As per Azure AD entitlement management APIHowever while going through https://goodworkaround.com/2023/04/14/terraforming-your-way-through-azure-ad-entitlement-management/ I was able to conclude that catalog_resource_association_id is created when you add any group to the catalogue.

# Assign all security groups we have created to our catalog
resource "azuread_access_package_resource_catalog_association" "blogpost_groups" {
  for_each               = azuread_group.security_groups
  catalog_id             = ***azuread_access_package_catalog.blogpost.id***
  resource_origin_id     = ***each.value.object_id***
  resource_origin_system = "AadGroup"

And the Catalogue and group ID are associated resulting into catalog_resource_association_id where resource is the group. As in above screenshot the initials of all id are same probably catalogue id.

I would recommend to work with Terraform support to shed more light this as this ID is uniquely generated and understood by terraform.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.