search

CompositionalIT / farmer

Repeatable Azure deployments with ARM templates - made easy!
https://compositionalit.github.io/farmer
MIT License
523 stars 157 forks source link

RBAC Assignment scope for specific resource #1012

Closed et1975 closed 1 year ago

et1975 commented 1 year ago

Looking at AssignmentScope and SpecificResource case the use of ResourceId makes me wonder how version in ResourceId could be omitted.

It makes sense to require version when we're concerned with RP API and/or resource representation, but from Identity, RBAC scope and pretty much any resource reference perspective the version is irrelevant.

Maybe there needs to be a way to construct ResourceId w/o version or an arbitrary AssignmentScope case?

I see there's also ResourceRef type as well, maybe that needs to be extended to allow opaque relative Uri and AssignmentScope case of ResourceRef offered?

et1975 commented 1 year ago

Also noticed that SpecificResource is trying to create a dependency, which obviously fails for resource/reference deployed outside of the template.