NOTES:
-
Support for Microsoft Graph: This release introduces beta support for Microsoft Graph in a way that is forward (and backward) compatible with the current Azure Active Directory Graph API implementation. We do not recommend enabling this beta in production at this time, but encourage you to try it out in test environments where minimal impact can occur if something doesn't work as expected. See the Migration Guide for more details.
-
Deprecations: This release contains a number of additional deprecations to aid in future upgrades to version 2.0 of this provider. These will be flagged when running Terraform, and are documented in detail in the Migration Guide. Existing configurations will continue to work unchanged for any v1.x release, regardless of which API is used.
IMPROVEMENTS:
data.azuread_user
- export theuser_type
attribute (#406)azuread_user
- export theuser_type
attribute (#401] / [#413)
BUG FIXES:
azuread_application
- validation for theidentifier_uris
property now supports URNs (#426)
IMPROVEMENTS:
- dependencies: updating to build using Go 1.16 which adds support for
darwin/arm64
(Apple Silicon) (#403) - Data Source:
azuread_group
- support for themail_enabled
andsecurity_enabled
properties (#393) azuread_group
- support for themail_enabled
andsecurity_enabled
attributes (#393)
IMPROVEMENTS:
azuread_application_certificate
- support for base64 and hex encoded certificate values (#386)azuread_service_principal_certificate
- support for base64 and hex encoded certificate values (#386)
BUGFIXES:
azuread_application
- set the display name correctly when creating/updating applications using thedisplay_name
property
BUGFIXES:
data.azuread_application
- correctly set thedisplay_name
attribute in state.azuread_application
- correctly set thedisplay_name
attribute in state.
NOTES:
- Terraform Plugin SDK Upgrade: This version upgrades the Terraform Plugin SDK to v2.3.0. This does not provide any additional provider features or resources but is useful for developers and part of our development roadmap.
- Refactor into multiple packages: As part of our preparation for Microsoft Graph support, this release refactors resources and data sources into separate Go packages.
IMPROVEMENTS:
azuread_application
- support new valuesinclude_externally_authenticated_upn
,include_externally_authenticated_upn_without_hash
, anduse_guid
for theadditional_properties
property of theoptional_claims
block.
DEPRECATIONS:
data.azuread_application
- thename
property has been renamed todisplay_name
and will be removed in version 2.0.data.azuread_group
- thename
property has been renamed todisplay_name
and will be removed in version 2.0.data.azuread_groups
- thenames
property has been renamed todisplay_names
and will be removed in version 2.0.azuread_application
- thename
property has been renamed todisplay_name
and will be removed in version 2.0.azuread_application
- thetype
property is now deprecated and will be removed in version 2.0, as there is no longer any distinction between native and webapp/api applications.azuread_group
- thename
property has been renamed todisplay_name
and will be removed in version 2.0.
BUG FIXES:
azuread_application
- resolves an issue where settingprevent_duplicate_names = true
causes an error for new applications (#367)azuread_application
- fixes a bug where the default owner for a new application is removed (#366)
FEATURES:
- Added a flag to allow users to customize the Partner ID or opt-out of the default Terraform Partner ID (#350)
- This release includes updated support for working directly with tenants using Azure CLI authentication. We recommend the use of
az login --allow-no-subscription
to populate tenant-level accounts (which have no subscriptions).
IMPROVEMENTS:
data.azuread_user
- support thegiven_name
,surname
,job_title
,department
,company_name
,physical_delivery_office_name
,street_address
,city
,state
,country
,postal_code
andmobile
attribute (#351)azuread_user
- support thegiven_name
,surname
,job_title
,department
,company_name
,physical_delivery_office_name
,street_address
,city
,state
,country
,postal_code
andmobile
properties (#351)
BUG FIXES:
- Provider: Fixed an issue where CLI authentication produced a
parsing json result
error during provider initialization (#358) azuread_application
- enable removal of owners on existing applications, and creation of applications with no owners (#355)azuread_application
- fixed a bug where specifying theprevent_duplicate_names
property would report a false positive on update. (#338)
NOTES:
- Major Version: This is a major version upgrade which contains some breaking changes as detailed below.
- Terraform 0.10/0.11: This version of the provider requires Terraform 0.12.x or later and will not work with earlier versions.
FEATURES:
- New resource:
azuread_application_app_role
(#150] [#306) - New resource:
azuread_application_oauth2_permission
(#267)
BREAKING CHANGES:
azuread_application
- a default value for thehomepage
property is no longer derived when unspecified (#268)azuread_application_password
- the deprecatedapplication_id
property has been removeddata.azuread_group
- thename
property is now case-insensitive (#246)data.azuread_groups
anddata.azuread_users
will not error if no results found
IMPROVEMENTS:
- Provider: no longer require configuring
subscription_id
(configuration value) /ARM_SUBSCRIPTION_ID
(environment variable). (#271) data.azuread_client_config
- deprecate thesubscription_id
property. For compatibility, still populatessubscription_id
if the provider is configured with a subscription ID (#271)data.azuread_application
- support for theapplication_id
property (#274)data.azuread_users
- support theignore_missing
property (#256)data.azuread_users
- export theusers
attribute containing a list of users with additional properties (#256)azuread_application
- support theprevent_duplicate_names
property (#279)azuread_application
- validateapp_roles
andoauth2_permissions
to check for duplicatevalue
s (#287)azuread_group
- support theprevent_duplicate_names
property (#279)
BUG FIXES:
azuread_group
- remediate AAD replication delays when adding/removing group members (#283)azuread_group
- remediate AAD replication delays after group creation, before setting owners/members (#290)
BREAKING CHANGES:
-
azuread_application
- theoauth2_permissions
attribute has changed from a list to a set. If you are referencing this attribute with explicit list indexes, you will need to update your configuration to use afor
expression. For example:id = azuread_application.example.oauth2_permissions[0].id
becomes
id = [for permission in azuread_application.example.oauth2_permissions : permission.id][0]
FEATURES:
- New Resource:
azuread_application_certificate
(#262) - New Resource:
azuread_service_principal_certificate
(#262)
IMPROVEMENTS:
azuread_application
- support for theoptional_claims
property, for access tokens and ID tokens (#260)azuread_application
- support for theoauth2_permissions
property (#252)azuread_application_password
- support thedescription
property (#253)azuread_service_principal_password
- support thedescription
property (#253)data.azuread_users
- support empty lists foruser_principal_names
/object_ids
/mail_nicknames
properties (#258)data.azuread_groups
- support empty lists fornames
/object_ids
properties (#257)
BUG FIXES:
azuread_application_password
andazuread_service_principal_password
- Plan-time validation forend_date
/end_date_relative
(#261)azuread_application_password
andazuread_service_principal_password
- Change the resource ID format to mitigate potential UUID collision (#264)
DEPENDENCIES:
- upgrade
azure-sdk-for-go
tov42.1.0
(#247)
IMPROVEMENTS:
azuread_application
- thegroup_membership_claims
property now supportsApplicationGroup
(#238)azuread_service_principal
- changing thetags
property no longer forces a new resource (#245)
BUG FIXES:
data.azuread_user
- useequals
instead ofstartsWith
when looking uo users bymailNickname
(#251)data.azuread_users
- useequals
instead ofstartsWith
when looking uo users bymailNickname
(#251)
FEATURES:
- New Data Source:
azuread_client_config
(#229)
IMPROVEMENTS:
- dependencies: upgrade
azure-sdk-for-go
tov40.3.0
(#225) - dependencies: upgrade
go-autorest/autorest
tov0.10.0
(#225) - dependencies: upgrade
terraform-plugin-sdk
tov1.6.0
(#225) azuread_application
- support for thelogout_url
property (#226)azuread_group
- support for thedescription
property (#216)azuread_user
- support for theonpremises_sam_account_name
andonpremises_user_principal_name
properties (#222)azuread_user
- support for theimmutable_id
property (#207)
BUG FIXES:
azuread_application
- ensure all owners are added before removed (#226)azuread_application_password
- validate thelength
property is less then863
(#228)azuread_group
- theowners
property is now additive during creation allowing an existing owner to be provided (#211)azuread_group_member
- mark as missing when member cannot be found instead of erroring (#227)azuread_service_principal_password
- validate thelength
property is less then863
(#228)
IMPROVEMENTS:
- provider: migrate to standalone plugin SDK v1.1.0 (#154)
- provider: using the current (rather than the vendored) version of Terraform Core in user agents (#154)
azuread_application
- adds ability to build homepage with HTTP in addition to HTTPS (#155)azuread_application
- allow theapp_role
blockvalue
property to be nil (#157)azuread_user
- support for theusage_location
property (#141)data.azuread_user
- support looking up a user withmail_nickname
(#161)data.azuread_users
- support looking up users withmail_nicknames
(#161)
IMPROVEMENTS:
- dependencies: upgrading
github.com/Azure/azure-sdk-for-go
tov32.5.0
(#140) - dependencies: upgrading
github.com/Azure/go-autorest
tov13.0.0
(#140) - dependencies: upgrading
github.com/hashicorp/go-azure-helpers
tov0.7.0
(#140) - dependencies: upgrading
github.com/hashicorp/terraform
to0.12.6
(#133) azuread_service_principal
- support for theapp_role_assignment_required
property (#127)
BUG FIXES:
azuread_application_password
- fix incorrect conflicts with (#129)
FEATURES:
IMPROVEMENTS:
azuread_application
- support for theapp_roles
property (#98)azuread_application
- theidentifier_uris
property now allowsapi
,urn
, andms-appx
URI schemas (#115)azuread_application_password
- deprecation ofapplication_id
in favour ofapplication_object_id
(#107)azuread_group
- support for themembers
property (#100)azuread_group
- support for theowners
property (#62)azuread_service_principal
- export theoauth2_permissions
property (#103)data.azuread_application
- support for theapp_roles
property (#110)data.azuread_service_principal
- export theapp_roles
property (#110)
BUG FIXES:
azuread_application_password
- will now wait for replication on resource creation (#118)azuread_service_principal_password
- will now wait for replication on resource creation (#117)
NOTES:
- Resource creation potentially could take longer after this release as the provider will now attempt to wait for replication like the az cli tool.
FEATURES:
- New Resource:
azuread_application_password
(#71)
IMPROVEMENTS:
- dependencies: upgrading to
v0.12.0
ofgithub.com/hashicorp/terraform
(#82) azuread_application
- support for thegroup_membership_claims
property (#78)azuread_application
- now exports theoauth2_permissions
property (#79)azuread_application
- now exports theobject_id
property (#99)azuread_application
- support for thetype
property enabling the creation ofnative
applications (#74)azuread_application
- will now wait for replication by waiting for 10 successful reads after creation (#93)azuread_group
- will now wait for replication by waiting for 10 successful reads after creation (#91)azuread_group
- now exports theobject_id
property (#99)azuread_service_principal
- will now wait for replication by waiting for 10 successful reads after creation (#93)azuread_service_principal
- now exports theobject_id
property (#99)azuread_user
- will now wait for replication by waiting for 10 successful reads after creation (#91)azuread_user
- increase the maximum allowed length ofpassword
to 256 (#81)azuread_user
- now exports theobject_id
property (#99)data.azuread_application
- now exports thegroup_membership_claims
property (#78)data.azuread_application
- now exports theoauth2_permissions
property (#79)
BUG FIXES:
- Release fixing metadata to register the provider as compatible with Terraform 0.12.
NOTES:
- This release includes a Terraform SDK upgrade with compatibility for Terraform v0.12. The provider remains backwards compatible with Terraform v0.11 and there should not be any significant behavioural changes. (#56)
BUG FIXES:
azuread_application
- the order of thereply_urls
property no longer matters (#61)
FEATURES:
- New Data Source:
azuread_domains
(#27) - New Data Source:
azuread_group
(#14) - New Resource:
azuread_group
(#14)
IMPROVEMENTS:
- dependencies: switching to use Go Modules (#26)
- dependencies: updating
github.com/Azure/azure-sdk-for-go
to v24.1.0 (#25) - dependencies: updating
github.com/Azure/go-autorest
to v11.2.8 (#24) - validation: adding validation to all fields (#30)
azuread_application
- support forrequired_resource_access
property (#23)azuread_service_principal
- support for thetags
property (#31)azuread_service_principal_password
- support for realitive ends dates with theend_date_relative
property (#53)
BUG FIXES:
azuread_application
- correctly reading back thereply_urls
property into state (#21)
Initial release of the Azure Active Directory provider - featuring resources split out from the AzureRM Provider.
FEATURES:
- New Data Source:
azuread_application
- New Data Source:
azuread_service_principal
- New Resource:
azuread_application
- New Resource:
azuread_service_principal
- New Resource:
azuread_service_principal_password