Skip to content

Commit 096307c

Browse files
authored
Update README.md
1 parent a502b25 commit 096307c

File tree

1 file changed

+8
-9
lines changed

1 file changed

+8
-9
lines changed

README.md

Lines changed: 8 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,14 @@ Terraform module to integrate Azure as a meshPlatform into meshStack instance.
44

55
With this module, service principals used by meshStack are created with the required permissions.
66

7+
# Prerequisites
8+
Permissions on AAD level are needed to run this module.
9+
Tenant wide admin consent must be granted for a succesful meshPlatform setup. Therefore to integrate a meshPlatform you need:
10+
11+
> An Azure account with one of the following roles: Global Administrator, Privileged Role Administrator, Cloud Application Administrator, or Application Administrator. A user can also be authorized to grant tenant-wide consent if they are assigned a custom directory role that includes the permission to grant permissions to applications.[^1]
12+
13+
[^1]: See [Azure public documentation](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent#prerequisites)
14+
715
# Usage
816
```hcl
917
module "meshplatform" {
@@ -33,8 +41,6 @@ module "meshplatform" {
3341
}
3442
```
3543

36-
37-
3844
By default, kraken, replicator, and idplookup service principals are enabled and will be created. To disable a service principal, set its according flag to `false`.
3945

4046
e.g.:
@@ -51,10 +57,3 @@ module "meshplatform" {
5157
idplookup_enabled = false
5258
}
5359
```
54-
# Prerequisites
55-
Permissions on AAD level are needed to run this module.
56-
Tenant wide admin consent must be granted for a succesful meshPlatform setup. Therefore to integrate a meshPlatform you need:
57-
58-
> An Azure account with one of the following roles: Global Administrator, Privileged Role Administrator, Cloud Application Administrator, or Application Administrator. A user can also be authorized to grant tenant-wide consent if they are assigned a custom directory role that includes the permission to grant permissions to applications.[^1]
59-
60-
[^1]: See [Azure public documentation](https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/grant-admin-consent#prerequisites)

0 commit comments

Comments
 (0)