Garrard.GitLab 0.0.1

Garrard.AzureLib

Garrard.AzureLib is a .NET library that provides operations for working with Azure resources.

Installation

To install Garrard.AzureLib, you can use the NuGet package manager. Run the following command in the Package Manager Console:

Install-Package Garrard.AzureLib -Version 0.0.1

Or add the following package reference to your project file:

<PackageReference Include="Garrard.AzureLib" Version="0.0.1" />

Or use the dotnet add command:

dotnet add package Garrard.AzureLib --version 0.0.1

Usage

Here is an example of how to use Garrard.AzureLib in your project:

using Garrard.AzureLib;

class Program
{
    static async Task Main(string[] args)
    {
        await Helpers.CheckAndInstallDependencies(Console.WriteLine);
        var credentialsResult = await EntraIDOperations.ObtainAzureCredentials(Console.WriteLine);
        if (credentialsResult.IsFailure)
        {
            Console.WriteLine(credentialsResult.Error);
            return;
        }
        var (subscriptionId, tenantId, billingAccountId, enrollmentAccountId, spnName) = credentialsResult.Value;
        string groupName = "example-group";
        string scope = "/";
        Result<string> clientIdResult = await EntraIDOperations.GetClientId(spnName, Console.WriteLine);
        if (clientIdResult.IsFailure)
        {
            Console.WriteLine(clientIdResult.Error);
            return;
        }
        string clientId = clientIdResult.Value;
        await EntraIDOperations.AssignSubscriptionCreatorRole(clientId, Console.WriteLine);
        await EntraIDOperations.CreateGroup(groupName, Console.WriteLine);
        await EntraIDOperations.AddSpToGroup(spnName, groupName, clientId, Console.WriteLine);
        await EntraIDOperations.AssignOwnerRoleToGroup(groupName, clientId, scope, Console.WriteLine);
        var apiPermissionsResult = await EntraIDOperations.AddApiPermissions(clientId, Console.WriteLine);
        if (apiPermissionsResult.IsFailure)
        {
            Console.WriteLine(apiPermissionsResult.Error);
            return;
        }
    }
}

Features

• Check and install dependencies
• Obtain Azure credentials
• Get client ID
• Assign Subscription Creator Role to Service Principal (Required for EA and Subscription Vending)
  • Your User Security Principal first needs to be assinged as Billing Administrator for your Tenant.
• Create an EntraID Group
• Add Service Principal to a EntraID Group
• Assign Owner Role to EntraID Group
• Assign a Role to an EntraID Group
• Add API permissions
• Grant Admin Consent to Service Principal

Contributing

Contributions are welcome! Please open an issue or submit a pull request on GitHub.

License

This project is licensed under the MIT License. See the LICENSE file for more details.