Otdfbt

Helping ease my back pain by studying 13 hours everyday , even weekends

How many people are necessary to maintain modern civilisation?

Does a proton have a binding energy?

Is it illegal to withhold someone's passport and green card in California?

What is "industrial ethernet"?

Is there a difference between an NFC and RFID chip?

Dates on degrees don’t make sense – will people care?

Do I have any obligations to my PhD supervisor's requests after I have graduated?

Greeting with "Ho"

What is the oldest commercial MS-DOS program that can run on modern versions of Windows without third-party software?

Umlaut character order when sorting

What does this Swiss black on yellow rectangular traffic sign with a symbol looking like a dart mean?

Boss wants someone else to lead a project based on the idea I presented to him

How can I prevent a user from copying files on another hard drive?

Mathematically modelling RC circuit with a linear input

What are the current battlegrounds for people’s “rights” in the UK?

How does DC work with natural 20?

Counterfeit checks were created for my account. How does this type of fraud work?

Why is it easier to balance a non-moving bike standing up than sitting down?

Is there a term for the belief that "if it's legal, it's moral"?

King or Queen-Which piece is which?

Do I have to explain the mechanical superiority of the player-character within the fiction of the game?

Drawing a second weapon as part of an attack?

Draw a symmetric alien head

What are my options for “tagging” AzureAd Security groups?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I am building an application for Azure Deployment. I happen to be storing the infrastructure as code in terraform, but I'm open to solving this problem with Azure CLI, ARM templates etc etc. I'm not actually using tags for any of the resources (app services, function apps, app service plans, sql server, sql db, etc) because they are all in one resource group, but I could add them later.

I also have a handful of security groups to ease managing the app, created by terraform. The idea is I assign these groups to SQL Roles and App registration roles, assign Service principles to these groups, assign app users to these groups etc, and then all the security management happens via these groups. The network admins managing this app can manage azureAd group memeberships easier than SQL roles, etc.

The problem is AzureAd groups are not part of resource groups, and as far as I can tell don't support the same tags as most things in resource groups do. So what are my options for creating some kind of grouping **thats easy to see in the
portal".

I know how to create Application level direction extensions in the azuread graph, but from the portal those things aren't visible. I think Directory extensions are similar, but I could be wrong.

So how can I "tag" a Security group so you can from the Azure portal get a list of all groups that are "owned" by my app?

azure-active-directory terraform

share|improve this question

asked Jun 3 at 12:53

Justin DearingJustin Dearing

787730

add a comment | 

0

I am building an application for Azure Deployment. I happen to be storing the infrastructure as code in terraform, but I'm open to solving this problem with Azure CLI, ARM templates etc etc. I'm not actually using tags for any of the resources (app services, function apps, app service plans, sql server, sql db, etc) because they are all in one resource group, but I could add them later.

I also have a handful of security groups to ease managing the app, created by terraform. The idea is I assign these groups to SQL Roles and App registration roles, assign Service principles to these groups, assign app users to these groups etc, and then all the security management happens via these groups. The network admins managing this app can manage azureAd group memeberships easier than SQL roles, etc.

The problem is AzureAd groups are not part of resource groups, and as far as I can tell don't support the same tags as most things in resource groups do. So what are my options for creating some kind of grouping **thats easy to see in the
portal".

I know how to create Application level direction extensions in the azuread graph, but from the portal those things aren't visible. I think Directory extensions are similar, but I could be wrong.

So how can I "tag" a Security group so you can from the Azure portal get a list of all groups that are "owned" by my app?

azure-active-directory terraform

share|improve this question

asked Jun 3 at 12:53

Justin DearingJustin Dearing

787730

add a comment | 

I am building an application for Azure Deployment. I happen to be storing the infrastructure as code in terraform, but I'm open to solving this problem with Azure CLI, ARM templates etc etc. I'm not actually using tags for any of the resources (app services, function apps, app service plans, sql server, sql db, etc) because they are all in one resource group, but I could add them later.

I also have a handful of security groups to ease managing the app, created by terraform. The idea is I assign these groups to SQL Roles and App registration roles, assign Service principles to these groups, assign app users to these groups etc, and then all the security management happens via these groups. The network admins managing this app can manage azureAd group memeberships easier than SQL roles, etc.

The problem is AzureAd groups are not part of resource groups, and as far as I can tell don't support the same tags as most things in resource groups do. So what are my options for creating some kind of grouping **thats easy to see in the
portal".

I know how to create Application level direction extensions in the azuread graph, but from the portal those things aren't visible. I think Directory extensions are similar, but I could be wrong.

So how can I "tag" a Security group so you can from the Azure portal get a list of all groups that are "owned" by my app?

azure-active-directory terraform

share|improve this question

asked Jun 3 at 12:53

Justin DearingJustin Dearing

787730

share|improve this question

asked Jun 3 at 12:53

Justin DearingJustin Dearing

787730

share|improve this question

asked Jun 3 at 12:53

Justin DearingJustin Dearing

787730

asked Jun 3 at 12:53

Justin DearingJustin Dearing

787730

asked Jun 3 at 12:53

Justin DearingJustin Dearing

787730