From 042d7c3bb4bc5078f4d345ce51b6d369d0356774 Mon Sep 17 00:00:00 2001
From: ikemsley <ikemsley@alertlogic.com>
Date: Fri, 22 Sep 2017 15:23:06 +0100
Subject: [PATCH] US63918 - Create RBAC role for app identity via ARM template

---
 template.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/template.json b/template.json
index 24678ea..65c8d7c 100644
--- a/template.json
+++ b/template.json
@@ -59,7 +59,7 @@
         "location": "[resourceGroup().location]",
         "resourceGroupName": "[resourceGroup().name]",
         "resourceGroupId": "[resourceGroup().id]",
-        "roleAssignmentId": "[split(resourceGroup().id, '/')[2]]",
+        "roleAssignmentId": "[guid(subscription().subscriptionId)]",
         "subscriptionId": "[split(subscription().id, '/')[2]]",
         "tenantId": "[subscription().tenantId]",
         "contributor": "[concat('/subscriptions/', subscription().subscriptionId, '/providers/Microsoft.Authorization/roleDefinitions/', 'b24988ac-6180-42a0-ab88-20f7382dd24c')]"