user-access-also

Author: brown9804

terraform-infrastructure/main.tf

@@ -325,6 +325,17 @@ resource "null_resource" "cosmosdb_sql_role_assignment" {
   ]
 }
 
+# Assign the Cosmos DB role to the user running the deployment 
+resource "null_resource" "cosmosdb_sql_role_assignment_user" {
+  provisioner "local-exec" {
+    command = "az cosmosdb sql role assignment create --resource-group ${azurerm_resource_group.rg.name} --account-name ${azurerm_cosmosdb_account.cosmosdb.name} --role-definition-id /subscriptions/${data.azurerm_client_config.current.subscription_id}/resourceGroups/${azurerm_resource_group.rg.name}/providers/Microsoft.DocumentDB/databaseAccounts/${azurerm_cosmosdb_account.cosmosdb.name}/sqlRoleDefinitions/00000000-0000-0000-0000-000000000002 --principal-id ${data.azurerm_client_config.current.object_id} --scope ${azurerm_cosmosdb_account.cosmosdb.id} --role-assignment-id ${local.cosmosdb_role_assignment_id}"
+  }
+
+  depends_on = [
+    azurerm_cosmosdb_account.cosmosdb
+  ]
+}
+
 # Linux Function App
 resource "azurerm_linux_function_app" "function_app" {
   name                       = var.function_app_name