azuread_application: support for required-resource-accesses?

[kvolkovich-sc]

azurerm version: 1.16

I want to grant permissions to Active Directory Application.

Using Azure CLI have such option:

az ad app update -h

...
update a native application with delegated permission of "access the AAD directory as the
    signed-in user"
        az ad app update --id e042ec79-34cd-498f-9d9f-123456781234 --required-resource-accesses
        @manifest.json
        ("manifest.json" contains the following content)
        [{
            "resourceAppId": "00000002-0000-0000-c000-000000000000",
            "resourceAccess": [
                {
                    "id": "a42657d6-7f20-40e3-b6f0-cee03008a62a",
                    "type": "Scope"
                }
           ]
        }]
...

Is there any way to do the same with Terraform AzureRM.

[tombuildsstuff]

hi @kvolkovich-sc

Thanks for opening this issue - apologies for the delayed response here!

Taking a quick look into this unfortunately this isn't supported by the azurerm_azuread_application resource at this time - however it appears support for this is available in the Azure SDK for Go, as such it should be possible for someone to add support for this :)

Thanks!

[katbyte]

Hi @kvolkovich-sc,

As in 2.0 we are deprecating all Azure AD resources and data sources in the Azure RM provider in favour of this new provider I have moved the issue here.

[michaelmeelis]

Hi,

I'm curious if this is going to be developed. I also have a need for this and I'm forced to script around it instead of having this neatly into terraform.

Greetings,
Michael

[gerardaus]

Pull request #23 adds support for this feature.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!