You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| <aname="input_scope"></a> [scope](#input\_scope)| The scope to which Service Principal permissions should be assigned to. Usually this is a management group that sits atop the subscriptions. |`string`| n/a | yes |
35
34
| <aname="input_service_principal_name_suffix"></a> [service\_principal\_name\_suffix](#input\_service\_principal\_name\_suffix)| Service principal name suffix. |`string`| n/a | yes |
| <aname="input_scope"></a> [scope](#input\_scope)| The scope to which Service Principal permissions should be assigned to. Usually this is a management group that sits atop the subscriptions. |`string`| n/a | yes |
35
+
| <aname="input_scope"></a> [scope](#input\_scope)| The scope to which Service Principal permissions should be assigned to. Usually this is the management group id of form `/providers/Microsoft.Management/managementGroups/<tenantId>` that sits atop the subscriptions. |`string`| n/a | yes |
36
36
| <aname="input_service_principal_name_suffix"></a> [service\_principal\_name\_suffix](#input\_service\_principal\_name\_suffix)| Service principal name suffix. |`string`| n/a | yes |
|[azuread_application_published_app_ids.well_known](https://registry.terraform.io/providers/hashicorp/azuread/2.18.0/docs/data-sources/application_published_app_ids)| data source |
| <aname="input_additional_permissions"></a> [additional\_permissions](#input\_additional\_permissions)| Additional Subscription-Level Permissions the Service Principal needs. |`list(string)`|`[]`| no |
40
40
| <aname="input_additional_required_resource_accesses"></a> [additional\_required\_resource\_accesses](#input\_additional\_required\_resource\_accesses)| Additional AAD-Level Resource Accesses the Service Principal needs. |`list(object({ resource_app_id = string, resource_accesses = list(object({ id = string, type = string })) }))`|`[]`| no |
41
-
| <aname="input_scope"></a> [scope](#input\_scope)| The scope to which Service Principal permissions should be assigned to. Usually this is a management group that sits atop the subscriptions. |`string`| n/a | yes |
41
+
| <aname="input_scope"></a> [scope](#input\_scope)| The scope to which Service Principal permissions should be assigned to. Usually this is the management group id of form `/providers/Microsoft.Management/managementGroups/<tenantId>` that sits atop the subscriptions. |`string`| n/a | yes |
42
42
| <aname="input_service_principal_name_suffix"></a> [service\_principal\_name\_suffix](#input\_service\_principal\_name\_suffix)| Service principal name suffix. |`string`| n/a | yes |
0 commit comments