Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a way to disable role assignments when using *AsExisting API #8419

Open
davidfowl opened this issue Mar 30, 2025 · 0 comments
Open

Add a way to disable role assignments when using *AsExisting API #8419

davidfowl opened this issue Mar 30, 2025 · 0 comments
Labels
area-integrations Issues pertaining to Aspire Integrations packages azure Issues associated specifically with scenarios tied to using Azure

Comments

@davidfowl
Copy link
Member

Discussed in #8051

Originally posted by DanielToft March 13, 2025
Hi

I'm not sure I understand the purpose of RunAsExisting.

Why is it deploying role assignments to the resource for the user running the aspire project? If the user running the aspire project does not have access to the resources, the bicep script will also not have access to deploy the role assignments.

Is it possible to override this? I would like to have this feature, but I do not want all employees to have direct access to the resources. This will be impossible to control. We already have a model to give employees access to the right resources.

Today I'm using AddConnectionString, but I think it would be nice to have the resources shown in the dashboard as I would with RunAsExisting.

@davidfowl davidfowl added area-integrations Issues pertaining to Aspire Integrations packages azure Issues associated specifically with scenarios tied to using Azure labels Mar 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area-integrations Issues pertaining to Aspire Integrations packages azure Issues associated specifically with scenarios tied to using Azure
Projects
None yet
Development

No branches or pull requests

1 participant