Skip to content

Commit

Permalink
Merge branch 'improve-tf-doc' of https://github.com/geekzter/azure-id…
Browse files Browse the repository at this point in the history
…entity-scripts into improve-tf-doc
  • Loading branch information
geekzter committed May 3, 2024
2 parents 87f0fb4 + e9f959f commit 0aabd43
Showing 1 changed file with 1 addition and 5 deletions.
6 changes: 1 addition & 5 deletions terraform/azure-devops/create-service-connection/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,6 @@ Pre-requisites:
This creates a Managed Identity with Federated Identity Credential and custom Azure RBAC (role-based access control) role assignments:

```hcl
azdo_creates_identity = false
azdo_organization_url = "https://dev.azure.com/my-organization"
azdo_project_name = "my-project"
azure_role_assignments = [
Expand Down Expand Up @@ -102,7 +101,6 @@ Pre-requisites:
This creates a Managed Identity with Federated Identity Credential and custom Azure RBAC (role-based access control) role assignments:

```hcl
azdo_creates_identity = false
azdo_organization_url = "https://dev.azure.com/my-organization"
azdo_project_name = "my-project"
azure_role_assignments = [] # No direct assignments
Expand All @@ -115,14 +113,13 @@ managed_identity_resource_group_id = "/subscriptions/11111111-1111-1111-1111-111
Pre-requisites:

- A resource group to hold the Managed Identity has been pre-created
- The user is an owner of the security enabled Entra ID group to add the Managed Identity to
- The user is an owner of the Entra ID security group to add the Managed Identity to

#### App registration with FIC and ITSM metadata

This creates an Entra ID app registration with IT service reference and notes fields populated as well as specifying co-owners:

```hcl
azdo_creates_identity = false
azdo_organization_url = "https://dev.azure.com/my-organization"
azdo_project_name = "my-project"
create_federation = true
Expand All @@ -145,7 +142,6 @@ Pre-requisites:
This creates an Entra ID app registration with secret that expires after 1 hour:

```hcl
azdo_creates_identity = false
azdo_organization_url = "https://dev.azure.com/my-organization"
azdo_project_name = "my-project"
azure_role_assignments = [
Expand Down

0 comments on commit 0aabd43

Please sign in to comment.