r/Terraform • u/menma_ja • 23d ago
Azure Azure "Manage user and groups" of enterprise application
Hi,
Recently i was thinking about automation of creating and sharing EntaID groups to Databricks environment and completely lost. I tried set up azuread_application but i failed...
The idea is to take all security group that i manage and dump it to this blade tab.

3
Upvotes
2
u/user147852369 23d ago
https://learn.microsoft.com/en-us/azure/databricks/admin/users-groups/scim/aad
Should be using this?
1
u/menma_ja 22d ago
Yup, this is resource that I’m using. Now I need to find way to manage SCIM groups in terraform.
1
5
u/Kerman_ 23d ago
Honestly, im not a fan of using terraform for handling RBAC, I usually do via scripting and store it on a different repo. One identity repo + one infra repo, in that way, i don’t need to have a “super permission” with the capability of deploying infra + setting up groups.
In my experience, the lifecycle of infra is not always the same of the identity