fix

Azure · Nov 11, 2024 · 212b0d6 · 212b0d6
1 parent 4c6d5d3
commit 212b0d6
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/deploy/templates/azuredeploy.json b/deploy/templates/azuredeploy.json
@@ -381,7 +381,7 @@
         "iotHubContributorRoleId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', '4fc6c259-987e-4a07-842e-c321cc9d413f')]",
         "iotHubPrincipalRoleAssignment": "[guid(parameters('iotHubName'), parameters('userPrincipalId'))]",
         "iotHubRoleAssignment": "[guid(parameters('iotHubName'), parameters('managedIdentityName'))]",
-        "iotHubRoleAssignmentResourceId": "[if(not(parameters('iotHubSharedAccessKeyEnabled')), resourceId('Microsoft.Resources/deployments', variables('iotHubRoleAssignment')), variables('iotHubResourceId'))]",
+        "iotHubRoleAssignmentResourceId": "[tenantResourceId('Microsoft.Authorization/roleAssignments', variables('iotHubRoleAssignment'))]",
         "iotHubKeyResource": "[resourceId('Microsoft.Devices/Iothubs/Iothubkeys', parameters('iotHubName'), variables('iotHubKeyName'))]",
         "iothubTelemetryConsumerGroup": "telemetry",
         "iothubEventsConsumerGroup": "events",
@@ -392,15 +392,15 @@
         "storagePrincipalBlobDataOwnerRoleAssignment": "[guid(parameters('storageName'), 'StorageBlobDataOwner', parameters('userPrincipalId'))]",
         "storagePrincipalStorageAccountContributorRoleAssignment": "[guid(parameters('storageName'), 'StorageAccountContributor', parameters('userPrincipalId'))]",
         "storageRoleAssignment": "[guid(parameters('storageName'), parameters('managedIdentityName'))]",
-        "storageRoleAssignmentResourceId": "[if(not(parameters('storageAccountKeyEnabled')), resourceId('Microsoft.Resources/deployments', variables('storageRoleAssignment')), variables('storageResourceId'))]",
+        "storageRoleAssignmentResourceId": "[tenantResourceId('Microsoft.Authorization/roleAssignments', variables('storageRoleAssignment'))]",
         "keyVaultResourceId": "[resourceId('Microsoft.KeyVault/vaults', parameters('keyVaultName'))]",
         "keyVaultSecretUserRoleId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'b86a8fe4-44ce-4948-aee5-eccb2c155cd7')]",
         "keyVaultPrincipalRoleAssignment": "[guid(parameters('keyVaultName'), parameters('userPrincipalId'))]",
         "keyVaultPrincipalAccessPolicy": { "tenantId": "[subscription().tenantId]", "objectId": "[parameters('userPrincipalId')]", "permissions": { "secrets": [ "all" ] }},
         "keyVaultAccessPolicies": "[if(and(not(empty(parameters('userPrincipalId'))), parameters('keyVaultUseAccessPolicies')), createArray(variables('keyVaultPrincipalAccessPolicy')), createArray())]",
         "keyVaultSecretOfficerRoleId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'b86a8fe4-44ce-4948-aee5-eccb2c155cd7')]",
         "keyVaultRoleAssignment": "[guid(parameters('keyVaultName'), parameters('managedIdentityName'))]",
-        "keyVaultRoleAssignmentResourceId": "[if(not(parameters('keyVaultUseAccessPolicies')), resourceId('Microsoft.Resources/deployments', variables('keyVaultRoleAssignment')), variables('keyVaultResourceId'))]",
+        "keyVaultRoleAssignmentResourceId": "[tenantResourceId('Microsoft.Authorization/roleAssignments', variables('keyVaultRoleAssignment'))]",
         "configurationResourceName": "[concat(deployment().name, '.configuration')]",
         "configurationResourceId": "[resourceId('Microsoft.Resources/deployments', variables('configurationResourceName'))]",
         "dpsResourceId": "[resourceId('Microsoft.Devices/provisioningServices', parameters('dpsName'))]",