Authentication to Azure File - Terraform

Question

Authentication to Azure File - Terraform

André Leblanc 1

I'm trying to make authentication automaticaly via terraform here is my TF script extract:

One of the parameter is storage_sid, I cannot find where to get it !

azure_files_authentication {
directory_type = "AADDS"
active_directory {
domain_name = var.domain.name
domain_guid = "xxxx"
domain_sid = "xxxxx
forest_name = var.domain.name
netbios_domain_name = var.domain.net_bios_name
storage_sid = "zzzz"
}
}

From the Terraform doc:

storage_sid - (Required) Specifies the security identifier (SID) for Azure Storage.

How can I extract it if I am currently creating it ?

André Leblanc 1 Reputation point

2022-07-06T16:04:00.48+00:00

Also, if I build my ressources with the Azure Portal. Then try to import the resources in my TF state. All values are empty except domain_name. But there are all mandatory.

So my main concern is just the storage_sid cause the other values I can find it.

1 answer

Your answer

André Leblanc 1 Reputation point

2022-07-06T16:04:00.48+00:00

Also, if I build my ressources with the Azure Portal. Then try to import the resources in my TF state. All values are empty except domain_name. But there are all mandatory.

So my main concern is just the storage_sid cause the other values I can find it.

Answer 1

SaiKishor-MSFT 17,336

@André Leblanc Thank you for reaching out to Microsoft Q&A. I understand that you are having questions regarding "storage_sid" parameter for your TF script.

Here is more information regarding the storage_sid parameter- It is the SID of the identity created in your AD DS that represents the Storage Account. Hope this helps. Please do let me know if you are looking for any further assistance regarding this issue. Thank you!

André Leblanc 1 Reputation point

2022-07-12T18:57:23.37+00:00

It is the SID of the identity created in your AD DS that represents the Storage Account

What is the command to find this storage_sid ?

Thanks!
SaiKishor-MSFT 17,336 Reputation points

2022-07-12T21:31:53.743+00:00

@André Leblanc As mentioned in this step, once you create a computer or service account under your OU, you can use Get-ADComputer command to find the Security Identifier (SID) of the same which will be the storage SID that you are looking for. Hope this helps. Please do let me know if you have further question and I will be glad to assist further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.

Share via

Authentication to Azure File - Terraform

1 answer

Your answer