This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi guys ,
I need a another help , how Can i put different group to GIVE different RBAC Role i can not .
For example , One group to Owner & another group to Contributor in a Bicep file
here is file , i marked i did , where i have to change :
@description('Name of the Service Bus namespace')
param serviceBusNamespaceName string = 'emranservicebusnamespace'
@description('Name of the Queue')
param serviceBusQueueName string = 'emranservicebusnamequeue'
@description('Location for all resources.')
param location string = 'westeurope'
param objectIds array = ['90e4c0e7-2982-4a1e-935a-88624a9eae53', 'a742530c-464d-4bf0-b317-9062647bd764']
resource serviceBusNamespace 'Microsoft.ServiceBus/namespaces@2022-01-01-preview' = {
name: serviceBusNamespaceName
location: location
sku: {
name: 'Standard'
}
properties: {}
}
resource serviceBusQueue 'Microsoft.ServiceBus/namespaces/queues@2022-01-01-preview' = {
parent: serviceBusNamespace
name: serviceBusQueueName
properties: {
lockDuration: 'PT5M'
maxSizeInMegabytes: 1024
requiresDuplicateDetection: false
requiresSession: false
defaultMessageTimeToLive: 'P10675199DT2H48M5.4775807S'
deadLetteringOnMessageExpiration: false
duplicateDetectionHistoryTimeWindow: 'PT10M'
maxDeliveryCount: 10
autoDeleteOnIdle: 'P10675199DT2H48M5.4775807S'
enablePartitioning: false
enableExpress: false
}
}
resource serviceBusDataReceiverRoleDefinition 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = {
scope: subscription()
name: '4f6d3b9b-027b-4f4c-9142-0e5a2a2247e0'
}
resource receiverRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = [for objectId in objectIds: {
name: guid(serviceBusNamespace.id, objectId[0] , serviceBusDataReceiverRoleDefinition.id)
scope: serviceBusNamespace
properties: {
roleDefinitionId: serviceBusDataReceiverRoleDefinition.id
principalId: objectId
}
}]
resource serviceBusDataSenderRoleDefinition 'Microsoft.Authorization/roleDefinitions@2022-04-01' existing = {
scope: subscription()
name: '69a216fc-b8fb-44d8-bc22-1f3c2cd27a39'
}
resource senderRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = [for objectId in objectIds: {
name: guid(serviceBusNamespace.id, objectId[1] , serviceBusDataSenderRoleDefinition.id)
scope: serviceBusNamespace
properties: {
roleDefinitionId: serviceBusDataSenderRoleDefinition.id
principalId: objectId
}
}]
Unless i'm missing some complexity, you just need to split the parameter to infer the access you want to provide.
param ownerObjectIds array = ['90e4c0e7-2982-4a1e-935a-88624a9eae53']
param contributorObjectIds array = [ 'a742530c-464d-4bf0-b317-9062647bd764']
Can you see my another ticket please ,
It is a bit similar: