microsoft / microsoft/azure-container-apps

Feature Request: Add Builtin Roles for operating container app jobs

Open
#1,024 5 comments 7 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement Jobs
Dominant language
Bicep
Stars
445
Forks
54
Avg merge
5h 14m
Merged PRs (30d)
3

Description

Is your feature request related to a problem? Please describe.
Today there's no builtin role that allows a user or a service principal to trigger container app jobs.

Describe the solution you'd like.
I would like to have a builtin azure rbac role that I could assign to Service Principals or system-assigned managed identity so they could trigger job executions.

Describe alternatives you've considered.
Today I've created a custom role with the following 3 actions:

  • microsoft.app/jobs/start/action
  • microsoft.app/jobs/stop/action
  • microsoft.app/jobs/read

And assigned it. it just works.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the three custom role actions listed in the issue and Azure's existing built-in role definitions for Container Apps jobs. Done means a built-in role is specified and verified to let service principals or system-assigned managed identities trigger job executions without a custom role.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure
Domain
authorization, cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.