Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Script execution prerequisite
  • You need Azure CLI module installed

  • Make sure you have Application Developer Role

  • Make sure you have Local Machine administrative rights

  • Make sure KeyVault exists and permission to write to it

  • Ability Make sure you have the ability to configure Enterprise Applications in Azure AD

  • Ability Make sure you have the ability to grant admin consent in App Registrations

...

  • [Optional] Configuration file path or will default to the app-registration-configuration.json in the same directory as the main.ps1 script file

    • If the configuration file is not in the same directory, the absolute path must be provided, and theisAbsolutePath parameter must be passed in to the script

  • Permissions folder

  • ResourceAccess folder

  • Roles folder

  • app-registration-configuration.json [Configuration File]

  • main.ps1

  • app-registration.ps1

  • app-registration-oauth2permissions.ps1

...

Pipeline Name

Variable Name

IsSecured

Associated Resource

Deployment 1 (Initial)

EnvironmentName

ServiceConnection

Name of the service connection for the resource group and environment.

DevOps->Project Settings->Service connections

AzureAdObjectId

Yes

KeyVault

AzureAdTenantId

Yes

KeyVault

EregistryResourceGroupName

Azure Portal

EregistryServiceConnectionName

SafsecsurResourceGroupName

Azure Portal

Deployment 2 (Safsecsur)

EnvironmentName

ServiceConnection

Name of the service connection for the resource group and environment.

DevOps->Project Settings->Service connections

ResourceGroupName

Azure Portal

ContainerRegistryPassword

Yes

ApimPublisherEmail

API Mangement

ApimPublisherName

API Management

PsqlAdminName

Yes

PostreSQL Database

PsqlAdminPassword

Yes

PostreSQL Database

PsqlFirewallIpAddress

PostreSQL Database

Deployment 3 (Eregistry)

EnvironmentName

ServiceConnection

DevOps->Project Settings

ResourceGroupName

Azure Portal

ContainerRegistryPassword

Yes

...