Add role assignments with .NET Aspire #2891
Conversation
Co-authored-by: Andy (Steve) De George <[email protected]>
| .WithReference(search); | ||
| ``` | ||
|
|
||
| When you use the `WithRoleAssignments` method, it replaces the default role assignments with the specified ones. This method requires two parameters: the resource to which the role assignment applies and the built-in role to assign. In the preceding example, the `search` resource is assigned the <xref:Azure.Provisioning.Search.SearchBuiltInRole.SearchIndexDataReader?displayProperty=nameWithType> role. |
There was a problem hiding this comment.
In the preceding example, the
searchresource is assigned the xref:Azure.Provisioning.Search.SearchBuiltInRole.SearchIndexDataReader?displayProperty=nameWithType role.
I would flip this wording. It isn't the search resource that is assigned that role. Instead, the api project is assigned that role to the search resource.
| For more information, see [.NET Aspire Azure App Container integration](../hosting/azure-app-container-integration.md). | ||
| --> | ||
|
|
||
| ### Azure Application Insights |
There was a problem hiding this comment.
We don't support App Insights role assignments. We actually don't grant any right now, even by default.
There was a problem hiding this comment.
|
|
||
| For more information, see [Azure built-in roles](/azure/role-based-access-control/built-in-roles). | ||
|
|
||
| ## Built-in role assignment reference |
There was a problem hiding this comment.
Is there not somewhere in Azure we could put these? This doesn't seem like our list to maintain.
| To override the default role assignment, use the `WithRoleAssignments` API and assign built-in roles as shown in the following example: | ||
|
|
||
| ```csharp | ||
| var builder = DistributedApplication.CreateBuilder(args); |
There was a problem hiding this comment.
Your app needs to use a compute environment that supports role assignments. In 9.2 the only one we support is Azure Container Apps. So you need to call either:
- Aspire.Hosting.AzureContainerAppExtensions.AddAzureContainerAppEnvironment
- Aspire.Hosting.AzureContainerAppExtensions.AddAzureContainerAppsInfrastructure
In order for role assignments to work. If you don't enable ACA infrastructure, an exception is thrown when your app starts if you call .WithRoleAssignments.
Summary
Add role assignments with .NET Aspire
Fixes #2788
Internal previews