Support for delegatedManagedIdentityResourceId to azurerm_role_definition resource

[grayzu]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Enable the Azure Lighthouse scenario described in this article with Terraform: Deploy a policy that can be remediated within a delegated subscription

In order to accomplish this, a new property has been added to role definitions in 2019-04-01-preview API. This property "delegatedManagedIdentityResourceId" is required for assigning roles in Azure Lighthouse. Update the azurerm_role_assignment resource to include the new property.

New or Affected Resource(s)

• azurerm_role_assignment

Potential Terraform Configuration

resource "azurerm_role_assignment" "example" {
  scope                             = data.azurerm_subscription.primary.id
  role_definition_name              = "Reader"
  principal_id                      = data.azurerm_client_config.example.object_id
  delegated_managed_identity_id     = azurerm_user_assigned_identity.example.id
}

[grayzu]

Swagger PR (draft) that will enable Terraform to support this new property: Azure/azure-rest-api-specs#11510

[justin-ldn]

We are super keen to have this feature as we are blocked on use of Terraform through Lighthouse using this.

[njuCZ]

delegatedManagedIdentityResourceId is a new field introduced in this PR Azure/azure-rest-api-specs#11506, however there is some problem in this PR which would cause go sdk generation failed. The service team has known this Issue and would fix it soon. For now it's blocked

[justin-ldn]

@njuCZ Thanks for explaining the dependency - is that work to resolve the issue with the merged PR above being tracked on GitHub?

[ghost]

This has been released in version 2.62.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 2.62.0"
}
# ... other configuration ...

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.