Azure 角色分配到 TF 中的组

Question

我正在尝试创建一个新组并通过 terraform 为其分配所有者角色，但我面临分配问题。

下面是代码

data "azurerm_subscription" "primary" {
}

data "azuread_client_config" "current" {}




resource "azuread_group" "group" {
  display_name  = "azure-group"
  security_enabled = False
}


resource "azurerm_role_assignment" "role-assign" {
  scope                = data.azurerm_subscription.primary.id
  role_definition_name = "Owner"
  principal_id         = data.azuread_group.group.object_id
}

运行计划时会看到此错误

│ Error: Reference to undeclared resource
│ 
│   on main.tf line 18, in resource "azurerm_role_assignment" "role-assign":
│   18:   principal_id         = data.azuread_group.group.object_id
│ 
│ A data resource "azuread_group" "group" has not been declared in the root module.```

Answer 1

您应该使用资源，而不是数据源。 所以而不是

principal_id         = data.azuread_group.group.object_id

它应该是

principal_id         = azuread_group.group.object_id