Azure 角色分配到 TF 中的組

Question

我正在嘗試創建一個新組並通過 terraform 為其分配所有者角色，但我面臨分配問題。

下面是代碼

data "azurerm_subscription" "primary" {
}

data "azuread_client_config" "current" {}




resource "azuread_group" "group" {
  display_name  = "azure-group"
  security_enabled = False
}


resource "azurerm_role_assignment" "role-assign" {
  scope                = data.azurerm_subscription.primary.id
  role_definition_name = "Owner"
  principal_id         = data.azuread_group.group.object_id
}

運行計划時會看到此錯誤

│ Error: Reference to undeclared resource
│ 
│   on main.tf line 18, in resource "azurerm_role_assignment" "role-assign":
│   18:   principal_id         = data.azuread_group.group.object_id
│ 
│ A data resource "azuread_group" "group" has not been declared in the root module.```

Answer 1

您應該使用資源，而不是數據源。 所以而不是

principal_id         = data.azuread_group.group.object_id

它應該是

principal_id         = azuread_group.group.object_id