Function assign_groups_to_app

infra/deploy_instance.py:268–293

Assign Entra security groups to the enterprise app. Args: sp_id (str): The service principal object ID. group_ids (list[str]): List of group object IDs to assign.

(*, sp_id: str, group_ids: list[str])

def assign_groups_to_app(*, sp_id: str, group_ids: list[str]) -> None:
    """
    Assign Entra security groups to the enterprise app.

    Args:
        sp_id (str): The service principal object ID.
        group_ids (list[str]): List of group object IDs to assign.
    """
    for group_id in group_ids:
        logger.info("Assigning group %s to enterprise app %s", group_id, sp_id)
        body = {
            "principalId": group_id,
            "resourceId": sp_id,
            "appRoleId": "00000000-0000-0000-0000-000000000000",
        }
        run_az(
            args=[
                "rest",
                "--method",
                "POST",
                "--url",
                f"https://graph.microsoft.com/v1.0/servicePrincipals/{sp_id}/appRoleAssignments",
                "--body",
                json.dumps(body),
            ]
        )


def create_sql_server_and_db(