https://github.com/libre-devops/azure-initial-tenant-setup-automation
A small scale deployment at initially setting up a Dev tenant - For when CAF is too damn much :)
https://github.com/libre-devops/azure-initial-tenant-setup-automation
Last synced: 10 months ago
JSON representation
A small scale deployment at initially setting up a Dev tenant - For when CAF is too damn much :)
- Host: GitHub
- URL: https://github.com/libre-devops/azure-initial-tenant-setup-automation
- Owner: libre-devops
- License: mit
- Created: 2023-09-03T22:02:19.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2023-09-05T22:08:38.000Z (almost 3 years ago)
- Last Synced: 2025-03-30T15:44:21.099Z (about 1 year ago)
- Language: PowerShell
- Size: 47.9 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# How to use this
1. Manually create subscription with GA account
2. With the name you used, add this to $subscriptionId inside `Management-Prep.ps1`
3. Run `Management-Prep.ps1`
4. Manually add the service principle and managed identity to Billing Contributor on the portal
4. Assign the service principle generated in the Management-Prep.ps1 or create a new one for more restricted access and assign the following Microsoft.Graph permissions manually in the portal:
The following:
- Application.ReadWrite.All
- AppRoleAssignment.ReadWrite.All
- Group.ReadWrite.All
- Directory.ReadWrite.All
- RoleManagement.ReadWrite.Directory
5. You may now run the Assign-GraphPermissions.ps1 (may need to run it twice, one for service principle and one for managed id)
6. Using details generated during `Management-Prep.ps1`, run the terraform build