mirror of
https://github.com/microsoft/autogen.git
synced 2026-04-20 03:02:16 -04:00
f423e15b1a
* namespace fixes + remove skills definitios from Actors project * add waf context to actors * deploy to Azure WIP * add bicep for gh-flow and cosmos * azure deploy fixes * azure deploy WIP
31 lines
863 B
Bicep
31 lines
863 B
Bicep
metadata description = 'Creates a SQL role definition under an Azure Cosmos DB account.'
|
|
param accountName string
|
|
|
|
resource roleDefinition 'Microsoft.DocumentDB/databaseAccounts/sqlRoleDefinitions@2022-08-15' = {
|
|
parent: cosmos
|
|
name: guid(cosmos.id, accountName, 'sql-role')
|
|
properties: {
|
|
assignableScopes: [
|
|
cosmos.id
|
|
]
|
|
permissions: [
|
|
{
|
|
dataActions: [
|
|
'Microsoft.DocumentDB/databaseAccounts/readMetadata'
|
|
'Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/*'
|
|
'Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/*'
|
|
]
|
|
notDataActions: []
|
|
}
|
|
]
|
|
roleName: 'Reader Writer'
|
|
type: 'CustomRole'
|
|
}
|
|
}
|
|
|
|
resource cosmos 'Microsoft.DocumentDB/databaseAccounts@2022-08-15' existing = {
|
|
name: accountName
|
|
}
|
|
|
|
output id string = roleDefinition.id
|