Merge pull request #7 from atea/renew

Update jobs with proper names

.github/workflows/tf.deploy.yml

@@ -17,14 +17,14 @@ permissions:
   pull-requests: write
 
 concurrency:
-  group: Test
+  group: Core
   cancel-in-progress: false
 
 jobs:
   terraform:
     name: 'Terraform'
     runs-on: ubuntu-latest
-    environment: Test
+    environment: Core
 
     # Use the Bash shell regardless whether the GitHub Actions runner is ubuntu-latest, macos-latest, or windows-latest
     defaults:

.github/workflows/tf.destroy.yml

@@ -8,14 +8,14 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: Test
+  group: Core
   cancel-in-progress: false
 
 jobs:
   terraform:
     name: 'Terraform'
     runs-on: ubuntu-latest
-    environment: Test
+    environment: Core
 
     # Use the Bash shell regardless whether the GitHub Actions runner is ubuntu-latest, macos-latest, or windows-latest
     defaults:

.github/workflows/tf.plan.yml

@@ -14,7 +14,7 @@ on:
   workflow_dispatch:
 
 concurrency:
-  group: Test
+  group: Core
   cancel-in-progress: false
 
 
@@ -23,7 +23,7 @@ jobs:
   terraform:
     name: 'Terraform'
     runs-on: ubuntu-latest
-    environment: Test
+    environment: Core
 
     # Use the Bash shell regardless whether the GitHub Actions runner is ubuntu-latest, macos-latest, or windows-latest
     defaults:

Core/rbac.tf

@@ -104,4 +104,23 @@ resource "azurerm_role_assignment" "sandbox_contributor" {
   scope                = module.alz_architecture.azurerm_management_group.level_2["/providers/Microsoft.Management/managementGroups/${var.root_id}-sandboxes"].id
   role_definition_name = "Contributor"
   principal_id         = azuread_group.sandbox_contributor.id
+}
+
+
+#TC24
+data "azuread_group" "TC24-Deltakere" {
+  display_name     = "TC24-Deltakere"
+  security_enabled = true
+}
+
+resource "azurerm_role_assignment" "Deltaker-LZ-Owner" {
+  scope                = "/providers/Microsoft.Management/managementGroups/${var.root_id}-landing-zones"
+  role_definition_name = "Owner"
+  principal_id         = data.azuread_group.TC24-Deltakere.object_id
+}
+
+resource "azurerm_role_assignment" "Deltaker-New-Subs-Owner" {
+  scope                = "/providers/Microsoft.Management/managementGroups/new-subscriptions"
+  role_definition_name = "Owner"
+  principal_id         = data.azuread_group.TC24-Deltakere.object_id
 }