Change role profile of the keyvault to "Administrator" from "User" (#381

)
civiform · Sep 6, 2024 · 48bd483 · 48bd483
1 parent a5220a6
commit 48bd483
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/cloud/azure/modules/app/role-assignments.tf b/cloud/azure/modules/app/role-assignments.tf
@@ -6,9 +6,9 @@ resource "azurerm_role_assignment" "storage_blob_delegator" {
   principal_id         = azurerm_linux_web_app.civiform_app.identity.0.principal_id
 }
 
-resource "azurerm_role_assignment" "key_vault_secrets_user" {
+resource "azurerm_role_assignment" "key_vault_secrets_principal_user" {
   scope                = data.azurerm_key_vault.civiform_key_vault.id
-  role_definition_name = "Key Vault Secrets User"
+  role_definition_name = "Key Vault Administrator"
   principal_id         = azurerm_linux_web_app.civiform_app.identity.0.principal_id
 }