...
Script execution prerequisite
You need Azure CLI module installed
Make sure you have Application Developer Role
Make sure you have Local Machine administrative rights
Make sure KeyVault exists and permission to write to it
Ability Make sure you have the ability to configure Enterprise Applications in Azure AD
Ability Make sure you have the ability to grant admin consent in App Registrations
...
[Optional] Configuration file path or will default to the
app-registration-configuration.json
in the same directory as themain.ps1
script fileIf the configuration file is not in the same directory, the absolute path must be provided, and the
isAbsolutePath
parameter must be passed in to the script
Permissions folder
ResourceAccess folder
Roles folder
app-registration-configuration.json
[Configuration File]main.ps1
app-registration.ps1
app-registration-oauth2permissions.ps1
...
Pipeline Name | Variable Name | IsSecured | Associated Resource |
---|---|---|---|
Deployment 1 (Initial) | EnvironmentName | ||
ServiceConnection | Name of the service connection for the resource group and environment. DevOps->Project Settings->Service connections | ||
AzureAdObjectId | Yes | KeyVault | |
AzureAdTenantId | Yes | KeyVault | |
EregistryResourceGroupName | Azure Portal | ||
EregistryServiceConnectionName | |||
SafsecsurResourceGroupName | Azure Portal | ||
Deployment 2 (Safsecsur) | EnvironmentName | ||
ServiceConnection | Name of the service connection for the resource group and environment. DevOps->Project Settings->Service connections | ||
ResourceGroupName | Azure Portal | ||
ContainerRegistryPassword | Yes | ||
ApimPublisherEmail | API Mangement | ||
ApimPublisherName | API Management | ||
PsqlAdminName | Yes | PostreSQL Database | |
PsqlAdminPassword | Yes | PostreSQL Database | |
PsqlFirewallIpAddress | PostreSQL Database | ||
Deployment 3 (Eregistry) | EnvironmentName | ||
ServiceConnection | DevOps->Project Settings | ||
ResourceGroupName | Azure Portal | ||
ContainerRegistryPassword | Yes |
...