Implement Authorization Policy resource

[F21]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritise this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritise the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

It would be nice if is a resource to manage authorization policy for an Azure AD tenant. This would allow the configuration of Azure AD's authorization settings.

New or Affected Resource(s)

• azuread_authorization_policy

Potential Terraform Configuration

resource "azuread_authorization_policy" "my_tenant" {
  allow_email_verified_users_to_join_organization = true
  allow_invites_from = "everyone"
  allow_user_consent_for_risky_apps = true
  allowed_to_sign_up_email_based_subscriptions = true
  allowed_to_use_sspr = true
  block_msol_powershell = true
  default_user_role_permissions {
    allowed_to_create_apps = true
    allowed_to_create_security_groups = true
    allowed_to_create_tenants = true
    permission_grant_policies_assigned = []
    allowed_to_read_bitlocker_keys_for_owned_devices = true
    allowed_to_read_other_users = true
  }
  description = "some description"
  display_name = "some policy"
  guest_user_role_id = "a0b1b346-4d3e-4e8b-98f8-753987be4970"
}

References

https://learn.microsoft.com/en-us/graph/api/resources/authorizationpolicy?view=graph-rest-1.0

[steve-kent1]

Yes, this is needed.