add scopemap read permission for custom ACR role (#845)

Signed-off-by: Gerd Oberlechner <[email protected]>
Azure · Nov 15, 2024 · 7e7da00 · 7e7da00
1 parent 7458cd9
commit 7e7da00
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/dev-infrastructure/modules/acr/acr.bicep b/dev-infrastructure/modules/acr/acr.bicep
@@ -73,6 +73,7 @@ resource tokenManagementRole 'Microsoft.Authorization/roleDefinitions@2022-04-01
           'Microsoft.ContainerRegistry/registries/tokens/delete'
           'Microsoft.ContainerRegistry/registries/generateCredentials/action'
           'Microsoft.ContainerRegistry/registries/tokens/operationStatuses/read'
+          'Microsoft.ContainerRegistry/registries/scopeMaps/read'
         ]
       }
     ]