token management custom role fix

Signed-off-by: Gerd Oberlechner <[email protected]>
Azure · Nov 28, 2024 · 34b95c6 · 34b95c6
1 parent 7553285
commit 34b95c6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/dev-infrastructure/modules/acr/acr.bicep b/dev-infrastructure/modules/acr/acr.bicep
@@ -60,9 +60,10 @@ resource roleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
 resource tokenManagementRole 'Microsoft.Authorization/roleDefinitions@2022-04-01' = {
   name: guid(resourceGroup().id, 'token-creation-role')
   properties: {
+    roleName: 'ACR Manage Tokens'
+    type: 'customRole'
     assignableScopes: [
       subscription().id
-      resourceGroup().id
     ]
     description: 'This role allows the management of tokens in the ACR'
     permissions: [
@@ -77,6 +78,5 @@ resource tokenManagementRole 'Microsoft.Authorization/roleDefinitions@2022-04-01
         ]
       }
     ]
-    roleName: 'ACR Manage Tokens'
   }
 }