What are my options for “tagging” AzureAd Security groups?
Helping ease my back pain by studying 13 hours everyday , even weekends
How many people are necessary to maintain modern civilisation?
Does a proton have a binding energy?
Is it illegal to withhold someone's passport and green card in California?
What is "industrial ethernet"?
Is there a difference between an NFC and RFID chip?
Dates on degrees don’t make sense – will people care?
Do I have any obligations to my PhD supervisor's requests after I have graduated?
Greeting with "Ho"
What is the oldest commercial MS-DOS program that can run on modern versions of Windows without third-party software?
Umlaut character order when sorting
What does this Swiss black on yellow rectangular traffic sign with a symbol looking like a dart mean?
Boss wants someone else to lead a project based on the idea I presented to him
How can I prevent a user from copying files on another hard drive?
Mathematically modelling RC circuit with a linear input
What are the current battlegrounds for people’s “rights” in the UK?
How does DC work with natural 20?
Counterfeit checks were created for my account. How does this type of fraud work?
Why is it easier to balance a non-moving bike standing up than sitting down?
Is there a term for the belief that "if it's legal, it's moral"?
King or Queen-Which piece is which?
Do I have to explain the mechanical superiority of the player-character within the fiction of the game?
Drawing a second weapon as part of an attack?
Draw a symmetric alien head
What are my options for “tagging” AzureAd Security groups?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I am building an application for Azure Deployment. I happen to be storing the infrastructure as code in terraform, but I'm open to solving this problem with Azure CLI, ARM templates etc etc. I'm not actually using tags for any of the resources (app services, function apps, app service plans, sql server, sql db, etc) because they are all in one resource group, but I could add them later.
I also have a handful of security groups to ease managing the app, created by terraform. The idea is I assign these groups to SQL Roles and App registration roles, assign Service principles to these groups, assign app users to these groups etc, and then all the security management happens via these groups. The network admins managing this app can manage azureAd group memeberships easier than SQL roles, etc.
The problem is AzureAd groups are not part of resource groups, and as far as I can tell don't support the same tags as most things in resource groups do. So what are my options for creating some kind of grouping **thats easy to see in the
portal".
I know how to create Application level direction extensions in the azuread graph, but from the portal those things aren't visible. I think Directory extensions are similar, but I could be wrong.
So how can I "tag" a Security group so you can from the Azure portal get a list of all groups that are "owned" by my app?
azure-active-directory terraform
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
add a comment |
I am building an application for Azure Deployment. I happen to be storing the infrastructure as code in terraform, but I'm open to solving this problem with Azure CLI, ARM templates etc etc. I'm not actually using tags for any of the resources (app services, function apps, app service plans, sql server, sql db, etc) because they are all in one resource group, but I could add them later.
I also have a handful of security groups to ease managing the app, created by terraform. The idea is I assign these groups to SQL Roles and App registration roles, assign Service principles to these groups, assign app users to these groups etc, and then all the security management happens via these groups. The network admins managing this app can manage azureAd group memeberships easier than SQL roles, etc.
The problem is AzureAd groups are not part of resource groups, and as far as I can tell don't support the same tags as most things in resource groups do. So what are my options for creating some kind of grouping **thats easy to see in the
portal".
I know how to create Application level direction extensions in the azuread graph, but from the portal those things aren't visible. I think Directory extensions are similar, but I could be wrong.
So how can I "tag" a Security group so you can from the Azure portal get a list of all groups that are "owned" by my app?
azure-active-directory terraform
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
add a comment |
I am building an application for Azure Deployment. I happen to be storing the infrastructure as code in terraform, but I'm open to solving this problem with Azure CLI, ARM templates etc etc. I'm not actually using tags for any of the resources (app services, function apps, app service plans, sql server, sql db, etc) because they are all in one resource group, but I could add them later.
I also have a handful of security groups to ease managing the app, created by terraform. The idea is I assign these groups to SQL Roles and App registration roles, assign Service principles to these groups, assign app users to these groups etc, and then all the security management happens via these groups. The network admins managing this app can manage azureAd group memeberships easier than SQL roles, etc.
The problem is AzureAd groups are not part of resource groups, and as far as I can tell don't support the same tags as most things in resource groups do. So what are my options for creating some kind of grouping **thats easy to see in the
portal".
I know how to create Application level direction extensions in the azuread graph, but from the portal those things aren't visible. I think Directory extensions are similar, but I could be wrong.
So how can I "tag" a Security group so you can from the Azure portal get a list of all groups that are "owned" by my app?
azure-active-directory terraform
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
I am building an application for Azure Deployment. I happen to be storing the infrastructure as code in terraform, but I'm open to solving this problem with Azure CLI, ARM templates etc etc. I'm not actually using tags for any of the resources (app services, function apps, app service plans, sql server, sql db, etc) because they are all in one resource group, but I could add them later.
I also have a handful of security groups to ease managing the app, created by terraform. The idea is I assign these groups to SQL Roles and App registration roles, assign Service principles to these groups, assign app users to these groups etc, and then all the security management happens via these groups. The network admins managing this app can manage azureAd group memeberships easier than SQL roles, etc.
The problem is AzureAd groups are not part of resource groups, and as far as I can tell don't support the same tags as most things in resource groups do. So what are my options for creating some kind of grouping **thats easy to see in the
portal".
I know how to create Application level direction extensions in the azuread graph, but from the portal those things aren't visible. I think Directory extensions are similar, but I could be wrong.
So how can I "tag" a Security group so you can from the Azure portal get a list of all groups that are "owned" by my app?
azure-active-directory terraform
azure-active-directory terraform
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
asked Jun 3 at 12:53
Justin DearingJustin Dearing
787730
787730
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f969932%2fwhat-are-my-options-for-tagging-azuread-security-groups%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f969932%2fwhat-are-my-options-for-tagging-azuread-security-groups%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
