Add support to modify EntraID directory role settings in PIM

[bryansan-msft]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritise this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritise the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

There is not a resource in this provider to configure EntraId directory role settings in PIM. #1327 added support for group membership settings but this doesnt cover EntraId directory role settings.

This is basically a duplicated of #1186 that was closed by @manicminer but it shouldnt have been closed since as I just mentioned #1327 doesn't cover this scenario.

We have:

• For Groups: azuread_group_role_management_policy Add support for PIM Group management #1327
• For Azure roles: azurerm_role_management_policy #25900
• For EntraId roles: ????

New or Affected Resource(s)

• azuread_directory_role_management_policy

References

• Manage azure role settings #1186

[phx-tim-butters]

Big upvote from me on this.

Why we have this for Groups and (now) Azure Resources, but not for Entra roles is odd!