使用ARM模板创建用户管理的身份和服务器管理员

Question

我想将用户管理的身份作为管理员添加到azure中的sql server资源。我可以使用ARM模板创建用户身份，如下所示：

{
    "type": "Microsoft.ManagedIdentity/userAssignedIdentities",
    "name": "[variables('identityName')]",
    "apiVersion": "2018-11-30",
    "location": "[resourceGroup().location]"
},

我还可以从ARM模板创建管理员资源。但是如何在管理员资源中引用上面创建的标识呢？

{
    "name": "[concat(variables('serverName'),'/ActiveDirectory')]",
    "type": "Microsoft.Sql/servers/administrators",
    "dependsOn": [
        "[resourceId('Microsoft.Sql/servers', variables('serverName'))]"
    ],
    "apiVersion": "2019-06-01-preview",
    "properties": {
        "administratorType": "ActiveDirectory",
        "login": "[parameters('identityName')]",
        "sid": "<How do I add reference here>",
        "tenantId": "<How do I add reference here>"
    }
}

Answer 1

我尝试了一些方法，但似乎运行得很好：

{
            "name": "[concat(variables('serverName'),'/ActiveDirectory')]",
            "type": "Microsoft.Sql/servers/administrators",
            "dependsOn": [
                "[resourceId('Microsoft.Sql/servers', variables('serverName'))]",
                "[resourceId('Microsoft.ManagedIdentity/userAssignedIdentities', variables('identityName'))]"
            ],
            "apiVersion": "2019-06-01-preview",
            "properties": {
                "administratorType": "ActiveDirectory",
                "login": "[variables('identityName')]",
                "sid": "[reference(concat('Microsoft.ManagedIdentity/userAssignedIdentities/', variables('identityName'))).clientId]",
                "tenantId": "[reference(concat('Microsoft.ManagedIdentity/userAssignedIdentities/', variables('identityName'))).tenantId]"
            }
        },