testing permission issue

Azure · Sep 22, 2023 · a4aad3f · a4aad3f
1 parent 2021266
commit a4aad3f
Showing 1 changed file with 6 additions and 15 deletions.
diff --git a/patterns/alz/alzArm.json b/patterns/alz/alzArm.json
@@ -1,5 +1,5 @@
 {
-    "$schema": "https://schema.management.azure.com/schemas/2019-08-01/tenantDeploymentTemplate.json#",
+    "$schema": "https://schema.management.azure.com/schemas/2019-08-01/managementGroupDeploymentTemplate.json#",
     "contentVersion": "1.0.0.0",
     "parameters": {
         "enterpriseScaleCompanyPrefix": {
@@ -162,15 +162,6 @@
             "identity": "[parameters('identityManagementGroup')]",
             "lzs": "[parameters('LandingZoneManagementGroup')]"
         },
-        // Declaring scopes that will be used for optional deployments, such as platform components (monitoring, networking, identity), policy assignments, subscription placement etc.
-        "scopes": {
-            "eslzRootManagementGroup": "[tenantResourceId('Microsoft.Management/managementGroups/', variables('mgmtGroups').eslzRoot)]",
-            "platformManagementGroup": "[tenantResourceId('Microsoft.Management/managementGroups/', variables('mgmtGroups').platform)]",
-            "managementManagementGroup": "[tenantResourceId('Microsoft.Management/managementGroups/', variables('mgmtGroups').management)]",
-            "connectivityManagementGroup": "[tenantResourceId('Microsoft.Management/managementGroups/', variables('mgmtGroups').connectivity)]",
-            "identityManagementGroup": "[tenantResourceId('Microsoft.Management/managementGroups/', variables('mgmtGroups').identity)]",
-            "lzsManagementGroup": "[tenantResourceId('Microsoft.Management/managementGroups/', variables('mgmtGroups').lzs)]"
-        },
         // Declaring all required deployment uri's used for deployments of composite ARM templates for ESLZ
         "deploymentUris": {
             "policyDefinitionsAMBA": "[uri(deployment().properties.templateLink.uri, 'policyDefinitions/policies.json')]",
@@ -261,7 +252,7 @@
             "type": "Microsoft.Resources/deployments",
             "apiVersion": "2020-10-01",
             "name": "[variables('deploymentNames').AMBAConnectivityDeploymentName]",
-            "scope": "[variables('scopes').connectivityManagementGroup]",
+            "scope": "[concat('Microsoft.Management/managementGroups/', parameters('connectivityManagementGroup'))]",
             "location": "[deployment().location]",
             "dependsOn": [
                 "policyCompletion"
@@ -288,7 +279,7 @@
             "type": "Microsoft.Resources/deployments",
             "apiVersion": "2020-10-01",
             "name": "[variables('deploymentNames').AMBAIdentityDeploymentName]",
-            "scope": "[variables('scopes').identityManagementGroup]",
+            "scope": "[concat('Microsoft.Management/managementGroups/', parameters('identityManagementGroup'))]",
             "location": "[deployment().location]",
             "dependsOn": [
                 "policyCompletion"
@@ -315,7 +306,7 @@
             "type": "Microsoft.Resources/deployments",
             "apiVersion": "2020-10-01",
             "name": "[variables('deploymentNames').AMBALandingZoneDeploymentName]",
-            "scope": "[variables('scopes').lzsManagementGroup]",
+            "scope": "[concat('Microsoft.Management/managementGroups/', parameters('LandingZoneManagementGroup'))]",
             "location": "[deployment().location]",
             "dependsOn": [
                 "policyCompletion"
@@ -342,7 +333,7 @@
             "type": "Microsoft.Resources/deployments",
             "apiVersion": "2020-10-01",
             "name": "[variables('deploymentNames').AMBAManagementDeploymentName]",
-            "scope": "[variables('scopes').managementManagementGroup]",
+            "scope": "[concat('Microsoft.Management/managementGroups/', parameters('managementManagementGroup'))]",
             "location": "[deployment().location]",
             "dependsOn": [
                 "policyCompletion"
@@ -369,7 +360,7 @@
             "type": "Microsoft.Resources/deployments",
             "apiVersion": "2020-10-01",
             "name": "[variables('deploymentNames').AMBAServiceHealthDeploymentName]",
-            "scope": "[variables('scopes').eslzRootManagementGroup]",
+            "scope": "[concat('Microsoft.Management/managementGroups/', parameters('enterpriseScaleCompanyPrefix'))]",
             "location": "[deployment().location]",
             "dependsOn": [
                 "policyCompletion"