update apps permission

Altinn · Jul 16, 2024 · 92cd2c5 · 92cd2c5
1 parent f0e367b
commit 92cd2c5
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/infrastructure/products/azure_arm.tf b/infrastructure/products/azure_arm.tf
@@ -203,7 +203,7 @@ resource "azurerm_role_assignment" "admins" {
 
 # https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/role_assignment
 resource "azurerm_role_assignment" "product_admins_storage_blob_owner" {
-  scope                = azurerm_storage_container.container.resource_manager_id
+  scope                = azurerm_storage_account.backend.id
   principal_id         = azuread_group.product_admins.object_id
   role_definition_name = data.azurerm_role_definition.storage_blob_data_owner.name
   #  skip_service_principal_aad_check = true
@@ -224,6 +224,8 @@ resource "azurerm_role_assignment" "products" {
   principal_id         = azuread_group.admins[each.value.slug].object_id
   role_definition_name = data.azurerm_role_definition.storage_blob_data_owner.name
 
+  depends_on = [azurerm_role_assignment.product_admins_contributor]
+
   condition_version = "2.0"
   condition         = <<-EOT
   (
@@ -249,6 +251,8 @@ resource "azurerm_role_assignment" "appregg" {
   role_definition_name             = data.azurerm_role_definition.storage_blob_data_owner.name
   skip_service_principal_aad_check = true
 
+  depends_on = [azurerm_role_assignment.product_admins_contributor]
+
   condition_version = "2.0"
   condition         = <<-EOT
   (