gk-lighthouse-owner.json

{
    "$schema": "https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "mspOfferName": {
            "type": "string",
            "metadata": {
                "description": "Specify a unique name for your offer"
            },
            "defaultValue": "GK Reporting Foundation Service - Access privileges"

        },
        "mspOfferDescription": {
            "type": "string",
            "metadata": {
                "description": "Name of the Managed Service Provider offering"
            },
            "defaultValue": "The solution will grant glueckkanja AG following RBAC role to your subscribtion: Owner - GK Azure Lighthouse Owner (covered by PIM)"
        },
        "managedByTenantId": {
            "type": "string",
            "metadata": {
                "description": "Tenant ID provided by GKGAB"
            },
            "defaultValue": "xxxx-xxxx-xxxx-xxxx-xxxx"
        },
        "OwnerPrincipalID": {
            "type": "string",
            "metadata": {
                "description": "Object ID of Owner Group provided by GKGAB"
            },
            "defaultValue": "xxxx-xxxx-xxxx-xxxx-xxxx"
        }            
    },
    "variables": {
        "mspRegistrationName": "[guid(parameters('mspOfferName'))]",
        "mspAssignmentName": "[guid(parameters('mspOfferName'))]",
        "authorizations": [
                { 
                    "principalId": "[parameters('OwnerPrincipalID')]", 
                    "roleDefinitionId": "b24988ac-6180-42a0-ab88-20f7382dd24c",
                    "principalIdDisplayName": "GK RF Azure Lighthouse Contributor" 
                },                { 
                    "principalId": "[parameters('OwnerPrincipalID')]", 
                    "roleDefinitionId": "92aaf0da-9dab-42b6-94a3-d43ce8d16293",
                    "principalIdDisplayName": "GK RF Azure Lighthouse Log Analytics Contributor" 
                }

            ]

    },
    "resources": [
        {
            "type": "Microsoft.ManagedServices/registrationDefinitions",
            "apiVersion": "2019-09-01",
            "name": "[variables('mspRegistrationName')]",
            "properties": {
                "registrationDefinitionName": "[parameters('mspOfferName')]",
                "description": "[parameters('mspOfferDescription')]",
                "managedByTenantId": "[parameters('managedByTenantId')]",
                "authorizations": "[variables('authorizations')]"
            }
        },
        {
            "type": "Microsoft.ManagedServices/registrationAssignments",
            "apiVersion": "2019-09-01",
            "name": "[variables('mspAssignmentName')]",
            "dependsOn": [
                "[resourceId('Microsoft.ManagedServices/registrationDefinitions/', variables('mspRegistrationName'))]"
            ],
            "properties": {
                "registrationDefinitionId": "[resourceId('Microsoft.ManagedServices/registrationDefinitions/', variables('mspRegistrationName'))]"
            }
        }
    ],
    "outputs": {
        "mspOfferName": {
            "type": "string",
            "value": "[concat('Managed by', ' ', parameters('mspOfferName'))]"
        },
        "authorizations": {
            "type": "array",
            "value": "[variables('authorizations')]"
        }
    }
}