Added missing role assignment for Storage Blob Data Contributor

tinglesoftware · Sep 11, 2023 · 5c88065 · 5c88065
1 parent e199332
commit 5c88065
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/server/main.bicep b/server/main.bicep
@@ -447,6 +447,15 @@ resource storageQueueDataContributorRoleAssignment 'Microsoft.Authorization/role
     principalType: 'ServicePrincipal'
   }
 }
+resource storageBlobDataContributorRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
+  name: guid(managedIdentity.id, 'StorageBlobDataContributor')
+  scope: resourceGroup()
+  properties: {
+    roleDefinitionId: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')
+    principalId: managedIdentity.properties.principalId
+    principalType: 'ServicePrincipal'
+  }
+}
 resource logAnalyticsReaderRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
   name: guid(managedIdentity.id, 'LogAnalyticsReader')
   scope: resourceGroup()