Azure AD groups cannot be deleted when the calling identity is a service principal. This is a limitation from the Active Directory Graph. It is required to use the Microsoft Graph to support the deletion of an Azure AD groups when called from a service principal. The current AzureAd terraform provider is currently based on the Active Directory as has the limitation described.
The documentation of the Create, Update and Delete REST API can be found here:
Azure AD groups cannot be deleted when the calling identity is a service principal. This is a limitation from the Active Directory Graph. It is required to use the Microsoft Graph to support the deletion of an Azure AD groups when called from a service principal. The current AzureAd terraform provider is currently based on the Active Directory as has the limitation described.
The documentation of the Create, Update and Delete REST API can be found here:
For the landing zones the following attributes are required:
Proposed implementation