tfsaggregator / aggregator-cli

A new version of Aggregator aiming at Azure DevOps (ex Visual Studio Team Services)

https://tfsaggregator.github.io/

Apache License 2.0

74 stars 32 forks source link

ResourceGroups Read permissions mandatory? #262

Open aldodfm opened 2 years ago

aldodfm commented 2 years ago

Steps to reproduce

User with Contributor access to Resource group Perform actions to create instances 2022-04-04_12h23_19

Expected behavior

Creation of Instance

Actual behavior

Error not permissions to read Resource groups in Subcription...

On documentations says:

CLI & Azure The CLI scenario has two additional requirements:

an Azure Subscription a Service Principal with, at least, Contributor permission on a Resource Group of the Subscription

giuliov commented 2 years ago

The screenshot is blurry, so please confirm.

The first error is a list.instances with no further argument: Aggregator tries to list all the RG in the Subscription, so the error is expected. You must add a -g option to limit the scope to a single RG.

The second error is unexpected. The code simply calls IAzure.ResourceGroups.ContainAsync so should work fine with Contributor permissions.

stale[bot] commented 2 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.