How to add a permission to an AD App with Pulumi

Question

I try to add the "Sign in and read user profile" permission to my app, but I can't find how to do it.

Here is the code I have now

const myApp= new azure.ad.Application("myApp", {
    name: "myApp",
    availableToOtherTenants: false,
    homepage: "https://homepage",
    identifierUris: ["https://uri"],
    oauth2AllowImplicitFlow: true,
    replyUrls: ["https://replyurl"]
});

const myAppPrincipal= new azure.ad.ServicePrincipal("myAppPrincipal", {
    applicationId: myApp.applicationId,
});

How to do the permission with Pulumi?

score 2 · Accepted Answer · answered Mar 11 '19 at 12:48

2

this is not possible, pulumi depends on terraform, and terraform has no graph resources, only ARM stuff.

new azure ad provider (right now identical to old one): https://www.terraform.io/docs/providers/azuread/index.html

answered Mar 11 '19 at 12:48

4c74356b41

69,186
6
100
141

Ok, so the only way to solve that at the moment is to add an ARM template in my index.ts to solve this part? – JuChom Mar 11 '19 at 12:50
arm template cannot add azure ad roles as well – 4c74356b41 Mar 11 '19 at 12:50
1

you can use nodejs sdk to assign those – 4c74356b41 Mar 11 '19 at 12:54
https://learn.microsoft.com/en-us/javascript/api/overview/azure/activedirectory?view=azure-node-latest – 4c74356b41 Mar 11 '19 at 12:55

How to add a permission to an AD App with Pulumi

1 Answers1