azurerm_role_management_policy
- Support for resource scope
#27205
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Community Note
Description
As described in the documentation provided by Microsoft, role management policies can be configured on resource scope.
Currently the resource will fail with an error saying it is not an valid management group id:
parsing "/subscriptions/xxxx/resourceGroups/xxxx/providers/Microsoft.KeyVault/vaults/xxx": parsing segment "providers": parsing the ManagementGroup ID: the segment at position 0 didn't match
.Since resource scope is actually valid, I made the scope validation the same as of the other 'role type' resources, in order to allow it.
PR Checklist
Changes to existing Resource / Data Source
Testing
--- PASS: TestAccRoleManagementPolicyDataSource_resource (125.02s)
--- PASS: TestAccRoleManagementPolicy_resource (162.81s)
side note: I had to ran the test with the primary_approver.object_id hardcored, since I don't have admin access to an Entra ID tenant in which I can create groups.
Change Log
Below please provide what should go into the changelog (if anything) conforming to the Changelog Format documented here.
azurerm_role_management_policy
- Support for resource scopeThis is a (please select all that apply):
Related Issue(s)
closes #26396