READ ME

Thanks for your interest in Cloud Adoption Framework for Azure landing zones on Terraform. This module is now deprecated and no longer maintained.

As part of Cloud Adoption Framework landing zones for Terraform, we have migrated to a single module model, which you can find here: https://github.com/aztfmod/terraform-azurerm-caf and on the Terraform registry: https://registry.terraform.io/modules/aztfmod/caf/azurerm

In Terraform 0.13 you can now call directly submodules easily with the following syntax:

module "caf_custom_roles" {
  source  = "aztfmod/caf/azurerm//modules/roles/custom_roles"
  version = "0.4.18"
  # insert the 3 required variables here
}

Deploy custom roles and assign to subscriptions

This module creates a set of custom roles and assigns them to a subscription.

Requirements

No requirements.

Providers

Name	Version
azurecaf	n/a
azurerm	n/a

Inputs

Name	Description	Type	Default	Required
aad_apps	Map of aad_app objects that could be associated to a subscription	any	n/a	yes
custom_role_definition	n/a	object({ name = string convention = string description = string useprefix = bool scope = object({ subscriptions_keys = string explicit_scope = string }) assignable_scopes = list(string) permissions = object({ actions = list(string) not_actions = list(string) data_actions = list(string) not_data_actions = list(string) }) mapping_subscription_key_to_azure_app_keys = map(string) })	{ "assignable_scopes": [], "convention": "cafrandom", "description": "", "mapping_subscription_key_to_azure_app_keys": {}, "name": "", "permissions": { "actions": [], "data_actions": [], "not_actions": [ "*" ], "not_data_actions": [] }, "scope": { "explicit_scope": "", "subscriptions_keys": "" }, "useprefix": false }	no
custom_role_definitions	Map of custom_role_definition object as defined in the custom_role_definition	any	n/a	yes
prefix	n/a	string	""	no
subscriptions	Map of subscriptions	any	n/a	yes

Outputs

Name	Description
assignment	n/a
azurecaf_naming_convention	n/a
custom_role	n/a
custom_role_definitions	n/a