@drunk-pulumi/azure 0.0.37 → 0.0.38

package/AzAd/Helper.d.ts

@@ -1,18 +1,29 @@
-import { KeyVaultInfo } from '../types';
-import * as azureAD from '@pulumi/azuread';
+import { IdentityRoleAssignment, KeyVaultInfo } from "../types";
+import { Input } from "@pulumi/pulumi";
 interface Props {
     name: string;
-    includePrincipalSecret?: boolean;
+    includePrincipal?: boolean;
     vaultInfo: KeyVaultInfo;
 }
-export declare const getIdentitySecrets: ({ name, vaultInfo, includePrincipalSecret, }: Props) => Promise<{
-    clientId: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
-    clientSecret: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
-    principalId: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
-    principalSecret: import("@azure/keyvault-secrets").KeyVaultSecret | undefined;
-}>;
-export declare const getIdentity: (name: string, isGlobal?: boolean) => Promise<{
-    app: azureAD.GetApplicationResult;
-    principal: azureAD.GetServicePrincipalResult;
-}>;
+export type IdentityInfoResults = {
+    objectId: string;
+    clientId: string;
+    clientSecret?: string;
+    principalObjectId?: string;
+    principalId?: string;
+    principalSecret?: string;
+};
+export declare const getIdentitySecretNames: (name: string) => {
+    objectIdName: string;
+    clientIdKeyName: string;
+    clientSecretKeyName: string;
+    principalIdKeyName: string;
+    principalSecretKeyName: string;
+};
+export declare const getIdentityInfo: ({ name, vaultInfo, includePrincipal, }: Props) => Promise<IdentityInfoResults>;
+export declare const getIdentityInfoOutput: (props: Props) => import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<IdentityInfoResults>>;
+export declare const grantIdentityPermissions: ({ name, principalId, vaultInfo, roles, envRole, }: IdentityRoleAssignment & {
+    name: string;
+    principalId: Input<string>;
+}) => void;
 export {};

package/AzAd/Helper.js

@@ -1,37 +1,110 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getIdentity = exports.getIdentitySecrets = void 0;
+exports.grantIdentityPermissions = exports.getIdentityInfoOutput = exports.getIdentityInfo = exports.getIdentitySecretNames = void 0;
 const Naming_1 = require("../Common/Naming");
 const Helper_1 = require("../KeyVault/Helper");
-const azureAD = require("@pulumi/azuread");
-const getIdentitySecrets = async ({ name, vaultInfo, includePrincipalSecret, }) => {
+const pulumi_1 = require("@pulumi/pulumi");
+const EnvRoles_1 = require("./EnvRoles");
+const RoleAssignment_1 = require("./RoleAssignment");
+const Group_1 = require("./Group");
+const getIdentitySecretNames = (name) => ({
+    objectIdName: (0, Naming_1.getSecretName)(`${name}-object-id`),
+    clientIdKeyName: (0, Naming_1.getSecretName)(`${name}-client-id`),
+    clientSecretKeyName: (0, Naming_1.getSecretName)(`${name}-client-secret`),
+    principalIdKeyName: (0, Naming_1.getSecretName)(`${name}-principal-id`),
+    principalSecretKeyName: (0, Naming_1.getSecretName)(`${name}-principal-secret`),
+});
+exports.getIdentitySecretNames = getIdentitySecretNames;
+const getIdentityInfo = async ({ name, vaultInfo, includePrincipal, }) => {
     name = (0, Naming_1.getIdentityName)(name);
-    const clientIdKeyName = (0, Naming_1.getSecretName)(`${name}-client-id`);
-    const clientSecretKeyName = (0, Naming_1.getSecretName)(`${name}-client-secret`);
-    const principalIdKeyName = (0, Naming_1.getSecretName)(`${name}-principal-id`);
-    const principalSecretKeyName = (0, Naming_1.getSecretName)(`${name}-principal-secret`);
-    const [clientId, clientSecret] = await Promise.all([
-        (0, Helper_1.getSecret)({ name: clientIdKeyName, vaultInfo }),
-        (0, Helper_1.getSecret)({ name: clientSecretKeyName, vaultInfo }),
+    const secretNames = (0, exports.getIdentitySecretNames)(name);
+    const [objectId, clientId, clientSecret] = await Promise.all([
+        (0, Helper_1.getSecret)({ name: secretNames.objectIdName, vaultInfo }),
+        (0, Helper_1.getSecret)({ name: secretNames.clientIdKeyName, vaultInfo }),
+        (0, Helper_1.getSecret)({ name: secretNames.clientSecretKeyName, vaultInfo }),
     ]);
-    const [principalId, principalSecret] = includePrincipalSecret
+    const [principalId, principalSecret] = includePrincipal
         ? await Promise.all([
-            (0, Helper_1.getSecret)({ name: principalIdKeyName, vaultInfo }),
-            (0, Helper_1.getSecret)({ name: principalSecretKeyName, vaultInfo }),
+            (0, Helper_1.getSecret)({ name: secretNames.principalIdKeyName, vaultInfo }),
+            (0, Helper_1.getSecret)({ name: secretNames.principalSecretKeyName, vaultInfo }),
         ])
         : [undefined, undefined];
-    return { clientId, clientSecret, principalId, principalSecret };
+    return {
+        objectId: objectId.value,
+        clientId: clientId.value,
+        clientSecret: clientSecret?.value,
+        principalId: principalId?.value,
+        principalSecret: principalSecret?.value,
+    };
 };
-exports.getIdentitySecrets = getIdentitySecrets;
-const getIdentity = async (name, isGlobal = false) => {
-    const displayName = isGlobal ? `global-${name}` : (0, Naming_1.getIdentityName)(name);
-    const app = await azureAD.getApplication({
-        displayName,
+exports.getIdentityInfo = getIdentityInfo;
+const getIdentityInfoOutput = (props) => (0, pulumi_1.output)((0, exports.getIdentityInfo)(props));
+exports.getIdentityInfoOutput = getIdentityInfoOutput;
+// export const grantIdentityRolesAccess = ({
+//   name,
+//   principalId,
+//   scope,
+//   roleType,
+//   additionRoles,
+//   dependsOn,
+//   ...others
+// }: RoleEnableTypes & {
+//   name: string;
+//   principalId: Input<string>;
+//   scope: Input<string>;
+//   roleType: EnvRoleKeyTypes;
+//   additionRoles?: string[];
+//   dependsOn?: Input<Input<Resource>[]> | Input<Resource>;
+// }) => {
+//   const roles = getRoleNames(others);
+//   const finalRoles = new Set(additionRoles);
+//
+//   if (roleType === "readOnly") roles.readOnly.forEach((r) => finalRoles.add(r));
+//   if (roleType === "contributor")
+//     roles.contributor.forEach((r) => finalRoles.add(r));
+//   if (roleType === "admin") roles.admin.forEach((r) => finalRoles.add(r));
+//
+//   Array.from(finalRoles)
+//     .sort()
+//     .forEach((r) => {
+//       const n = `${name}-${roleType}-${replaceAll(r, " ", "")}`;
+//       roleAssignment({
+//         name: n,
+//         principalId,
+//         principalType: "ServicePrincipal",
+//         roleName: r,
+//         scope,
+//         dependsOn,
+//       });
+//     });
+// };
+const grantIdentityToResourceRoles = ({ name, roles, principalId, }) => roles.map((r) => (0, RoleAssignment_1.roleAssignment)({
+    name,
+    roleName: r.name,
+    principalId: principalId,
+    principalType: "ServicePrincipal",
+    scope: r.scope,
+}));
+const grantIdentityEnvRolesGroup = ({ name, roleType, vaultInfo, principalId, }) => {
+    const role = (0, pulumi_1.output)((0, EnvRoles_1.getEnvRole)(roleType, vaultInfo));
+    return (0, Group_1.addMemberToGroup)({
+        name,
+        objectId: principalId,
+        groupObjectId: role.objectId,
     });
-    const principal = await azureAD.getServicePrincipal({
-        displayName,
-    });
-    return { app, principal };
 };
-exports.getIdentity = getIdentity;
-//# sourceMappingURL=data:application/json;base64,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
+const grantIdentityPermissions = ({ name, principalId, vaultInfo, roles, envRole, }) => {
+    if (roles) {
+        grantIdentityToResourceRoles({ name, roles, principalId });
+    }
+    if (envRole && vaultInfo) {
+        grantIdentityEnvRolesGroup({
+            name,
+            roleType: envRole,
+            principalId,
+            vaultInfo,
+        });
+    }
+};
+exports.grantIdentityPermissions = grantIdentityPermissions;
+//# sourceMappingURL=data:application/json;base64,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

package/AzAd/Identities/AzDevOpsIdentity.d.ts

@@ -0,0 +1,12 @@
+import { KeyVaultInfo } from "../../types";
+export declare const defaultAzAdoName = "azure-devops";
+interface Props {
+    name?: string;
+    vaultInfo: KeyVaultInfo;
+    additionRoles?: string[];
+}
+/** Get Global  ADO Identity */
+export declare const getAdoIdentityInfo: (vaultInfo: KeyVaultInfo) => import("@pulumi/pulumi").Output<import("@pulumi/pulumi").UnwrappedObject<import("../Helper").IdentityInfoResults>>;
+/** Create Global ADO Identity */
+declare const _default: ({ name, vaultInfo, additionRoles, ...others }: Props) => import("../Identity").IdentityResult;
+export default _default;

package/AzAd/Identities/AzDevOpsIdentity.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAdoIdentityInfo = exports.defaultAzAdoName = void 0;
+const Identity_1 = require("../Identity");
+const GraphDefinition_1 = require("../GraphDefinition");
+const Helper_1 = require("../Helper");
+const AzureEnv_1 = require("../../Common/AzureEnv");
+exports.defaultAzAdoName = "azure-devops";
+/** Get Global  ADO Identity */
+const getAdoIdentityInfo = (vaultInfo) => (0, Helper_1.getIdentityInfoOutput)({
+    name: exports.defaultAzAdoName,
+    vaultInfo,
+    includePrincipal: true,
+});
+exports.getAdoIdentityInfo = getAdoIdentityInfo;
+/** Create Global ADO Identity */
+exports.default = ({ name = exports.defaultAzAdoName, vaultInfo, additionRoles = ["Owner"], ...others }) => {
+    const graphAccess = (0, GraphDefinition_1.getGraphPermissions)({ name: "User.Read", type: "Scope" });
+    const ado = (0, Identity_1.default)({
+        name,
+        appType: "web",
+        createClientSecret: true,
+        createPrincipal: true,
+        requiredResourceAccesses: [graphAccess],
+        roles: additionRoles.map((role) => ({ name: role, scope: AzureEnv_1.defaultScope })),
+        vaultInfo,
+        ...others,
+    });
+    console.log(`Add this principal ${name} to [User administrator, Application administrator, Cloud application administrator and Global Reader] of Azure AD to allow to Add/Update and Delete Groups, Users`);
+    return ado;
+};
+//# sourceMappingURL=data:application/json;base64,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

package/AzAd/Identities/AzDevOpsManagedIdentity.d.ts

@@ -0,0 +1,7 @@
+import { BasicResourceArgs } from "../../types";
+interface Props extends Omit<BasicResourceArgs, "name"> {
+    name?: string;
+    lock?: boolean;
+}
+declare const _default: ({ name, ...others }: Props) => import("@pulumi/azure-native/managedidentity/userAssignedIdentity").UserAssignedIdentity;
+export default _default;

package/AzAd/Identities/AzDevOpsManagedIdentity.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const UserAssignedIdentity_1 = require("../UserAssignedIdentity");
+const AzDevOpsIdentity_1 = require("./AzDevOpsIdentity");
+const AzureEnv_1 = require("../../Common/AzureEnv");
+exports.default = ({ name = AzDevOpsIdentity_1.defaultAzAdoName, ...others }) => {
+    const additionRoles = ["Owner"];
+    return (0, UserAssignedIdentity_1.default)({
+        name,
+        roles: additionRoles.map((role) => ({ name: role, scope: AzureEnv_1.defaultScope })),
+        lock: true,
+        ...others,
+    });
+};
+//# sourceMappingURL=data:application/json;base64,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

package/AzAd/Identities/AzUserAdRevertSync.d.ts

@@ -1,14 +1,7 @@
-import { KeyVaultInfo } from '../../types';
+import { KeyVaultInfo } from "../../types";
 interface Props {
     name: string;
     vaultInfo: KeyVaultInfo;
 }
-declare const _default: ({ name, ...others }: Props) => import("../Identity").IdentityResult & {
-    vaultNames: {
-        clientIdKeyName: string;
-        clientSecretKeyName: string;
-        principalIdKeyName: string;
-        principalSecretKeyName: string;
-    };
-};
+declare const _default: ({ name, ...others }: Props) => import("../Identity").IdentityResult;
 export default _default;

package/AzAd/Identities/AzUserAdRevertSync.js

@@ -4,15 +4,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const Identity_1 = require("../Identity");
 const GraphDefinition_1 = require("../GraphDefinition");
 exports.default = ({ name, ...others }) => {
-    const graphAccess = (0, GraphDefinition_1.getGraphPermissions)({ name: 'User.Read.All', type: 'Role' }, { name: 'Group.Read.All', type: 'Role' });
-    const identity = (0, Identity_1.default)({
+    const graphAccess = (0, GraphDefinition_1.getGraphPermissions)({ name: "User.Read.All", type: "Role" }, { name: "Group.Read.All", type: "Role" });
+    return (0, Identity_1.default)({
         name,
-        appType: 'api',
+        appType: "api",
         createClientSecret: true,
         createPrincipal: true,
         requiredResourceAccesses: [graphAccess],
         ...others,
     });
-    return identity;
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/AzAd/Identities/index.d.ts

@@ -0,0 +1,3 @@
+export { default as AzDevOpsIdentity } from "./AzDevOpsIdentity";
+export { default as AzDevOpsManagedIdentity } from "./AzDevOpsManagedIdentity";
+export { default as AzUserAdRevertSync } from "./AzUserAdRevertSync";

package/AzAd/Identities/index.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AzUserAdRevertSync = exports.AzDevOpsManagedIdentity = exports.AzDevOpsIdentity = void 0;
+var AzDevOpsIdentity_1 = require("./AzDevOpsIdentity");
+Object.defineProperty(exports, "AzDevOpsIdentity", { enumerable: true, get: function () { return AzDevOpsIdentity_1.default; } });
+var AzDevOpsManagedIdentity_1 = require("./AzDevOpsManagedIdentity");
+Object.defineProperty(exports, "AzDevOpsManagedIdentity", { enumerable: true, get: function () { return AzDevOpsManagedIdentity_1.default; } });
+var AzUserAdRevertSync_1 = require("./AzUserAdRevertSync");
+Object.defineProperty(exports, "AzUserAdRevertSync", { enumerable: true, get: function () { return AzUserAdRevertSync_1.default; } });
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvQXpBZC9JZGVudGl0aWVzL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLHVEQUFpRTtBQUF4RCxvSEFBQSxPQUFPLE9BQW9CO0FBQ3BDLHFFQUErRTtBQUF0RSxrSUFBQSxPQUFPLE9BQTJCO0FBQzNDLDJEQUFxRTtBQUE1RCx3SEFBQSxPQUFPLE9BQXNCIn0=

package/AzAd/Identity.d.ts

@@ -1,13 +1,13 @@
-import * as azureAD from '@pulumi/azuread';
-import * as pulumi from '@pulumi/pulumi';
-import { Input, Output } from '@pulumi/pulumi';
-import { ApplicationApiOauth2PermissionScope, ApplicationAppRole, ApplicationRequiredResourceAccess, ApplicationOptionalClaims } from '@pulumi/azuread/types/input';
-import { KeyVaultInfo } from '../types';
+import * as azureAD from "@pulumi/azuread";
+import * as pulumi from "@pulumi/pulumi";
+import { Output } from "@pulumi/pulumi";
+import { ApplicationApiOauth2PermissionScope, ApplicationAppRole, ApplicationRequiredResourceAccess, ApplicationOptionalClaims } from "@pulumi/azuread/types/input";
+import { BasicArgs, IdentityRoleAssignment, KeyVaultInfo } from "../types";
 type PreAuthApplicationProps = {
     appId: string;
     oauth2PermissionNames: string[];
 };
-type IdentityProps = {
+interface IdentityProps extends BasicArgs, IdentityRoleAssignment {
     name: string;
     owners?: pulumi.Input<pulumi.Input<string>[]>;
     createClientSecret?: boolean;
@@ -16,21 +16,16 @@ type IdentityProps = {
     publicClient?: boolean;
     createPrincipal?: boolean;
     replyUrls?: pulumi.Input<pulumi.Input<string>[]>;
-    appType?: 'spa' | 'web' | 'api';
+    appType?: "spa" | "web" | "api";
     allowMultiOrg?: boolean;
     appRoles?: pulumi.Input<pulumi.Input<ApplicationAppRole>[]>;
     oauth2Permissions?: pulumi.Input<pulumi.Input<ApplicationApiOauth2PermissionScope>[]>;
     appRoleAssignmentRequired?: boolean;
     preAuthApplications?: PreAuthApplicationProps[];
     requiredResourceAccesses?: pulumi.Input<pulumi.Input<ApplicationRequiredResourceAccess>[]>;
-    /**The Role Assignment of principal. If scope is not defined the default scope will be at subscription level*/
-    principalRoles?: Array<{
-        roleName: string;
-        scope?: Input<string>;
-    }>;
     optionalClaims?: pulumi.Input<ApplicationOptionalClaims>;
-    vaultInfo?: KeyVaultInfo;
-};
+    vaultInfo: KeyVaultInfo;
+}
 export type IdentityResult = {
     name: string;
     objectId: Output<string>;
@@ -40,12 +35,5 @@ export type IdentityResult = {
     principalSecret: Output<string> | undefined;
     resource: azureAD.Application;
 };
-declare const _default: ({ name, owners, createClientSecret, createPrincipal, replyUrls, appType, allowMultiOrg, appRoles, appRoleAssignmentRequired, requiredResourceAccesses, oauth2Permissions, publicClient, principalRoles, optionalClaims, vaultInfo, }: IdentityProps) => IdentityResult & {
-    vaultNames: {
-        clientIdKeyName: string;
-        clientSecretKeyName: string;
-        principalIdKeyName: string;
-        principalSecretKeyName: string;
-    };
-};
+declare const _default: ({ name, owners, createClientSecret, createPrincipal, replyUrls, appType, allowMultiOrg, appRoles, appRoleAssignmentRequired, requiredResourceAccesses, oauth2Permissions, publicClient, roles, envRole, optionalClaims, vaultInfo, dependsOn, }: IdentityProps) => IdentityResult;
 export default _default;

package/AzAd/Identity.js

@@ -3,16 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const azureAD = require("@pulumi/azuread");
 const pulumi = require("@pulumi/pulumi");
 const Naming_1 = require("../Common/Naming");
-const RoleAssignment_1 = require("./RoleAssignment");
-const AzureEnv_1 = require("../Common/AzureEnv");
 const CustomHelper_1 = require("../KeyVault/CustomHelper");
-exports.default = ({ name, owners, createClientSecret = false, createPrincipal = false, replyUrls, appType = 'spa', allowMultiOrg = false, appRoles, appRoleAssignmentRequired, requiredResourceAccesses = [], oauth2Permissions, publicClient = false, principalRoles, optionalClaims, vaultInfo, }) => {
+const Helper_1 = require("./Helper");
+exports.default = ({ name, owners, createClientSecret = false, createPrincipal = false, replyUrls, appType = "spa", allowMultiOrg = false, appRoles, appRoleAssignmentRequired, requiredResourceAccesses = [], oauth2Permissions, publicClient = false, roles, envRole, optionalClaims, vaultInfo, dependsOn, }) => {
     // Azure AD Application no need suffix
     name = (0, Naming_1.getIdentityName)(name);
-    const clientIdKeyName = `${name}-client-id`;
-    const clientSecretKeyName = `${name}-client-secret`;
-    const principalIdKeyName = `${name}-principal-id`;
-    const principalSecretKeyName = `${name}-principal-secret`;
+    const secretNames = (0, Helper_1.getIdentitySecretNames)(name);
     const identifierUris = publicClient
         ? undefined
         : [`api://${name.toLowerCase()}`];
@@ -21,16 +17,16 @@ exports.default = ({ name, owners, createClientSecret = false, createPrincipal =
         description: name,
         owners,
         appRoles,
-        signInAudience: allowMultiOrg ? 'AzureADMultipleOrgs' : 'AzureADMyOrg',
-        groupMembershipClaims: ['SecurityGroup'],
+        signInAudience: allowMultiOrg ? "AzureADMultipleOrgs" : "AzureADMyOrg",
+        groupMembershipClaims: ["SecurityGroup"],
         identifierUris,
         publicClient: publicClient ? { redirectUris: replyUrls } : undefined,
-        singlePageApplication: appType === 'spa'
+        singlePageApplication: appType === "spa"
             ? {
                 redirectUris: replyUrls,
             }
             : undefined,
-        web: appType === 'web'
+        web: appType === "web"
             ? {
                 redirectUris: replyUrls,
                 implicitGrant: {
@@ -39,7 +35,7 @@ exports.default = ({ name, owners, createClientSecret = false, createPrincipal =
                 },
             }
             : undefined,
-        api: appType === 'api'
+        api: appType === "api"
             ? {
                 oauth2PermissionScopes: oauth2Permissions,
                 mappedClaimsEnabled: true,
@@ -52,29 +48,32 @@ exports.default = ({ name, owners, createClientSecret = false, createPrincipal =
             ? pulumi.output(requiredResourceAccesses).apply((r) => [...r])
             : undefined,
         optionalClaims,
+    }, { dependsOn });
+    (0, CustomHelper_1.addCustomSecret)({
+        name: secretNames.objectIdName,
+        value: app.objectId,
+        vaultInfo,
+        contentType: "Identity",
+    });
+    (0, CustomHelper_1.addCustomSecret)({
+        name: secretNames.clientIdKeyName,
+        value: app.clientId,
+        vaultInfo,
+        contentType: "Identity",
     });
-    if (vaultInfo)
-        (0, CustomHelper_1.addCustomSecret)({
-            name: clientIdKeyName,
-            value: app.clientId,
-            vaultInfo,
-            contentType: 'Identity',
-        });
     let clientSecret = undefined;
     if (createClientSecret) {
         clientSecret = new azureAD.ApplicationPassword(name, {
             displayName: name,
             applicationId: app.id,
-            endDateRelative: '43800h',
-            //value: randomPassword({ name: `${name}-clientSecret` }).result,
-        }, { ignoreChanges: ['applicationId', 'applicationObjectId'] }).value;
-        if (vaultInfo)
-            (0, CustomHelper_1.addCustomSecret)({
-                name: clientSecretKeyName,
-                value: clientSecret,
-                vaultInfo,
-                contentType: 'Identity',
-            });
+            endDateRelative: "43800h",
+        }, { ignoreChanges: ["applicationId", "applicationObjectId"] }).value;
+        (0, CustomHelper_1.addCustomSecret)({
+            name: secretNames.clientSecretKeyName,
+            value: clientSecret,
+            vaultInfo,
+            contentType: "Identity",
+        });
     }
     let principal;
     let principalSecret = undefined;
@@ -83,36 +82,32 @@ exports.default = ({ name, owners, createClientSecret = false, createPrincipal =
             //Allow to access to application as the permission is manage by Group assignment.
             appRoleAssignmentRequired,
             clientId: app.clientId,
-        }, { ignoreChanges: ['clientId', 'applicationId'] });
+        }, { ignoreChanges: ["clientId", "applicationId"] });
         principalSecret = new azureAD.ServicePrincipalPassword(name, {
             displayName: name,
             servicePrincipalId: principal.objectId,
-            endDateRelative: '43800h',
+            endDateRelative: "43800h",
             //value: randomPassword({ name: `${name}-principalSecret` }).result,
         }).value;
-        if (principalRoles) {
-            principalRoles.map((r) => (0, RoleAssignment_1.roleAssignment)({
-                name,
-                roleName: r.roleName,
-                principalId: principal.id,
-                principalType: 'ServicePrincipal',
-                scope: r.scope || AzureEnv_1.defaultScope,
-            }));
-        }
-        if (vaultInfo) {
-            (0, CustomHelper_1.addCustomSecret)({
-                name: principalIdKeyName,
-                value: principal.objectId,
-                vaultInfo,
-                contentType: 'Identity',
-            });
-            (0, CustomHelper_1.addCustomSecret)({
-                name: principalSecretKeyName,
-                value: principalSecret,
-                vaultInfo,
-                contentType: 'Identity',
-            });
-        }
+        (0, Helper_1.grantIdentityPermissions)({
+            name,
+            envRole,
+            roles,
+            vaultInfo,
+            principalId: principal.objectId,
+        });
+        (0, CustomHelper_1.addCustomSecret)({
+            name: secretNames.principalIdKeyName,
+            value: principal.objectId,
+            vaultInfo,
+            contentType: "Identity",
+        });
+        (0, CustomHelper_1.addCustomSecret)({
+            name: secretNames.principalSecretKeyName,
+            value: principalSecret,
+            vaultInfo,
+            contentType: "Identity",
+        });
     }
     return {
         name,
@@ -122,12 +117,6 @@ exports.default = ({ name, owners, createClientSecret = false, createPrincipal =
         principalId: principal?.objectId,
         principalSecret,
         resource: app,
-        vaultNames: {
-            clientIdKeyName,
-            clientSecretKeyName,
-            principalIdKeyName,
-            principalSecretKeyName,
-        },
     };
 };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/AzAd/Role.d.ts

@@ -1,8 +1,8 @@
 import { GroupPermissionProps } from "./Group";
 import { Environments } from "../Common/AzureEnv";
 import { Input } from "@pulumi/pulumi";
-interface RoleProps {
-    env: Environments;
+export interface RoleProps {
+    env?: Environments;
     /** The country code or GLB for Global*/
     location?: string;
     appName: string;
@@ -13,6 +13,5 @@ interface RoleProps {
     permissions?: Array<GroupPermissionProps>;
 }
 export type RoleNameType = Pick<RoleProps, "env" | "location" | "appName" | "moduleName" | "roleName">;
-export declare const getRoleName: ({ env, location, appName, moduleName, roleName, }: RoleNameType) => string;
 declare const _default: ({ members, owners, permissions, ...others }: RoleProps) => import("@pulumi/pulumi").Output<import("@pulumi/azuread/group").Group>;
 export default _default;

package/AzAd/Role.js

@@ -1,10 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRoleName = void 0;
 const Group_1 = require("./Group");
+const AzureEnv_1 = require("../Common/AzureEnv");
 const pulumi_1 = require("@pulumi/pulumi");
 const StackEnv_1 = require("../Common/StackEnv");
-const getRoleName = ({ env, location, appName, moduleName, roleName, }) => {
+const getRoleName = ({ env = AzureEnv_1.currentEnv, location, appName, moduleName, roleName, }) => {
     const nameBuilder = [`${StackEnv_1.organization} ROL`, env];
     if (location)
         nameBuilder.push(location);
@@ -15,9 +15,8 @@ const getRoleName = ({ env, location, appName, moduleName, roleName, }) => {
     nameBuilder.push(roleName);
     return nameBuilder.join(" ").toUpperCase();
 };
-exports.getRoleName = getRoleName;
 exports.default = ({ members, owners, permissions, ...others }) => {
-    const name = (0, exports.getRoleName)(others);
+    const name = getRoleName(others);
     return (0, pulumi_1.output)((0, Group_1.default)({
         name,
         members,
@@ -25,4 +24,4 @@ exports.default = ({ members, owners, permissions, ...others }) => {
         permissions,
     }));
 };
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUm9sZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9BekFkL1JvbGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsbUNBQStEO0FBRS9ELDJDQUErQztBQUMvQyxpREFBa0Q7QUFvQjNDLE1BQU0sV0FBVyxHQUFHLENBQUMsRUFDMUIsR0FBRyxFQUNILFFBQVEsRUFDUixPQUFPLEVBQ1AsVUFBVSxFQUNWLFFBQVEsR0FDSyxFQUFFLEVBQUU7SUFDakIsTUFBTSxXQUFXLEdBQUcsQ0FBQyxHQUFHLHVCQUFZLE1BQU0sRUFBRSxHQUFHLENBQUMsQ0FBQztJQUNqRCxJQUFJLFFBQVE7UUFBRSxXQUFXLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO0lBQ3pDLElBQUksVUFBVTtRQUFFLFdBQVcsQ0FBQyxJQUFJLENBQUMsR0FBRyxPQUFPLElBQUksVUFBVSxFQUFFLENBQUMsQ0FBQzs7UUFDeEQsV0FBVyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUMvQixXQUFXLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO0lBQzNCLE9BQU8sV0FBVyxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQyxXQUFXLEVBQUUsQ0FBQztBQUM3QyxDQUFDLENBQUM7QUFiVyxRQUFBLFdBQVcsZUFhdEI7QUFFRixrQkFBZSxDQUFDLEVBQUUsT0FBTyxFQUFFLE1BQU0sRUFBRSxXQUFXLEVBQUUsR0FBRyxNQUFNLEVBQWEsRUFBRSxFQUFFO0lBQ3hFLE1BQU0sSUFBSSxHQUFHLElBQUEsbUJBQVcsRUFBQyxNQUFNLENBQUMsQ0FBQztJQUNqQyxPQUFPLElBQUEsZUFBTSxFQUNYLElBQUEsZUFBYyxFQUFDO1FBQ2IsSUFBSTtRQUNKLE9BQU87UUFDUCxNQUFNO1FBQ04sV0FBVztLQUNaLENBQUMsQ0FDSCxDQUFDO0FBQ0osQ0FBQyxDQUFDIn0=
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUm9sZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9BekFkL1JvbGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQSxtQ0FBK0Q7QUFDL0QsaURBQThEO0FBQzlELDJDQUErQztBQUMvQyxpREFBa0Q7QUFvQmxELE1BQU0sV0FBVyxHQUFHLENBQUMsRUFDbkIsR0FBRyxHQUFHLHFCQUFVLEVBQ2hCLFFBQVEsRUFDUixPQUFPLEVBQ1AsVUFBVSxFQUNWLFFBQVEsR0FDSyxFQUFFLEVBQUU7SUFDakIsTUFBTSxXQUFXLEdBQUcsQ0FBQyxHQUFHLHVCQUFZLE1BQU0sRUFBRSxHQUFHLENBQUMsQ0FBQztJQUNqRCxJQUFJLFFBQVE7UUFBRSxXQUFXLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO0lBQ3pDLElBQUksVUFBVTtRQUFFLFdBQVcsQ0FBQyxJQUFJLENBQUMsR0FBRyxPQUFPLElBQUksVUFBVSxFQUFFLENBQUMsQ0FBQzs7UUFDeEQsV0FBVyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsQ0FBQztJQUMvQixXQUFXLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO0lBQzNCLE9BQU8sV0FBVyxDQUFDLElBQUksQ0FBQyxHQUFHLENBQUMsQ0FBQyxXQUFXLEVBQUUsQ0FBQztBQUM3QyxDQUFDLENBQUM7QUFFRixrQkFBZSxDQUFDLEVBQUUsT0FBTyxFQUFFLE1BQU0sRUFBRSxXQUFXLEVBQUUsR0FBRyxNQUFNLEVBQWEsRUFBRSxFQUFFO0lBQ3hFLE1BQU0sSUFBSSxHQUFHLFdBQVcsQ0FBQyxNQUFNLENBQUMsQ0FBQztJQUNqQyxPQUFPLElBQUEsZUFBTSxFQUNYLElBQUEsZUFBYyxFQUFDO1FBQ2IsSUFBSTtRQUNKLE9BQU87UUFDUCxNQUFNO1FBQ04sV0FBVztLQUNaLENBQUMsQ0FDSCxDQUFDO0FBQ0osQ0FBQyxDQUFDIn0=