microsoft / Broadcast-Development-Kit

Tools for Broadcasters utilizing Teams
MIT License
59 stars 25 forks source link

We are having queries on configuring “Azure SDK Service principle” and provide contributor role access to it. #42

Open nithinn821 opened 2 years ago

nithinn821 commented 2 years ago

We are using cross Tenant deployment

  1. Office Tenant (Microsoft 365 E5 Developer): Create app-registration and manage permission also share client ID to Hosting Tenant(xyz Company) through Bot channel registration
  2. We host MS Bot code in Hosting Tenant (xyz Company), The following services are also part of Hosting Tenant (xyz Company), • Virtual Machine with the installation of Gstreamer, Ngnix, etc. • Certificate installation • Event Grid • Cosmos DB • Azure AppService • Azure function • Self-hosted Service(Bot Service)

We are having queries on configuring “Azure SDK Service principle” and providing contributor access to it. Currently, we are blocked on this step. please follow the below article to configure the azure SDK service principal. https://github.com/microsoft/Broadcast-Development-Kit/blob/main/docs/how-to-run-the-solution-in-azure/azure_sdk_service_principal.md

Query: In our scenario (Cross-tenant), how could we provide contributor access to service principle (Office 365 Tenant) inside xyz company Dev tenant? The below image also depicts the same.

image

while exploring online, we found the following help. But, we are not sure how much it'll help. https://stackoverflow.com/questions/69314550/give-access-to-service-principal-which-is-in-another-azure-tenant stackoverflow.com/questions/65696539/how-to-create-a-multi-tenant-service-principal-in-azure-using-terraform Need your help on this.

nithinn821 commented 2 years ago

Hello Team, Any update on my queries?