Tom Bamford comments

Results 356 comments of


                                            Tom Bamford

Your own example of creating a group doesn't work

@Neutrino-Sunset Thanks for reporting. Just as a disclaimer, we provide the permissions references as a best effort convenience, but these are outside of our control and not automatically updated whenever...

Your own example of creating a group doesn't work

After testing, I can confirm that either `Directory.Read.All` or `Group.Read.All` roles are required in addition to `Group.Create`.

bugfix: resolve several potential crashes in new PIM resources

Test results:

feat: add runtime provider debugging capability

@iwarapter Thanks, I'll look at this for a potential release next week as I'm unfortunately out of time for today's release

azuread_application_registration can't be destroyed by owner if using azuread_application_owner

Thanks for reporting @agyss. Unfortunately, the wider context of the destroy operation is entirely unavailable to providers due to the way Terraform works. This means there is no way for...

azuread_application_registration can't be destroyed by owner if using azuread_application_owner

Just a thought - do you really need the `azuread_application_owner` resource here? Typically when you create an app registration, using app credentials authorized via a service principal holding only the...

Cannot assign groups to application via service principal

Hi @zemirco, thanks for reporting this issue. I couldn't say why the DELETE request is being sent without seeing a copy of the plan for this apply, however you will...

Cannot assign groups to application via service principal

Ah that's great, thanks for reporting back! This is easily missed and I'll see if we can call this out more clearly in the docs.

Cannot destroy `azuread_synchronization_secret` when complex JSON type is value of secret

@tagur87 Thanks for reporting this. At first glance this looks like it might be an API bug and/or design fault. We'll wait to hear back on the linked upstream issue...

azuread_group failing plan with Service Principal authentication

Thanks for raising this @kenchan0130. That's a great idea, I think that splitting these properties into a separate resource is a good way to approach this.