-
Notifications
You must be signed in to change notification settings - Fork 5
Open
Labels
Description
Description
Currently there are no data plane permissions (dataActions) assigned to the custom role which is used to figure out the minimium (corresponding to custom role actions) permissions required for a deployment.
In some terraform scenarios dataplane permissions are needed to complete the terraform apply and destroy, for instance if terraform script is creating Azure Search service indexes using a local provisioner. In such cases without the dataplane permissions, the azmpf utility would fail before calculating all the missing permissions, and allowing the user to specify default permissions for the dataActions would enable the utility to complete execution and figure out all permissions needed for the deployment.
Copilot