|
@@ -0,0 +1,29 @@
|
|
|
|
+targetScope = 'subscription'
|
|
|
|
+
|
|
|
|
+param deployStorage bool = true
|
|
|
|
+
|
|
|
|
+@description('The object ID of the principal that will get the role assignment')
|
|
|
|
+param aadPrincipalId string
|
|
|
|
+
|
|
|
|
+module stg './storage.bicep' = if(deployStorage) {
|
|
|
|
+ name: 'storageDeploy'
|
|
|
|
+ scope: resourceGroup('another-rg') // this will target another resource group in the same subscription
|
|
|
|
+ params: {
|
|
|
|
+ storageAccountName: '<YOURUNIQUESTORAGENAME>'
|
|
|
|
+ }
|
|
|
|
+}
|
|
|
|
+
|
|
|
|
+var contributor = 'b24988ac-6180-42a0-ab88-20f7382dd24c'
|
|
|
|
+resource roleDef 'Microsoft.Authorization/roleDefinitions@2018-01-01-preview' existing = {
|
|
|
|
+ name: contributor
|
|
|
|
+}
|
|
|
|
+
|
|
|
|
+resource rbac 'Microsoft.Authorization/roleAssignments@2020-04-01-preview' = {
|
|
|
|
+ name: guid(subscription().id, aadPrincipalId, contributor)
|
|
|
|
+ properties: {
|
|
|
|
+ roleDefinitionId: roleDef.id
|
|
|
|
+ principalId: aadPrincipalId
|
|
|
|
+ }
|
|
|
|
+}
|
|
|
|
+
|
|
|
|
+output storageName array = stg.outputs.containerProps
|