[AVM Module Issue]: The database-account module does not allow selecting which SQL role to associate the principal IDs with.

[mirabellog]

Check for previous/existing GitHub issues

• I have checked for previous/existing GitHub issues

Issue Type?

Bug

Module Name

avm/res/document-db/database-account

(Optional) Module Version

No response

Description

This module contains two parameters: sqlRoleDefinitions, which is used to deploy SQL role definitions, and sqlRoleAssignmentsPrincipalIds, which holds the principalIds for role assignments. Currently, all principalIds will be assigned the roles defined in the other parameter. My recommendation is to move sqlRoleAssignmentsPrincipalIds inside the sqlRoleDefinitions type so that it is possible to select which user to assign roles to.
My recommendation is to do something like this:

(Optional) Correlation Id

No response

[microsoft-github-policy-service]

Important

The "Needs: Triage 🔍" label must be removed once the triage process is complete!

Tip

For additional guidance on how to triage this issue/PR, see the BRM Issue Triage documentation.

[avm-team-linter]

@mirabellog, thanks for submitting this issue for the avm/res/document-db/database-account module!

Important

A member of the @Azure/avm-res-documentdb-databaseaccount-module-owners-bicep or @Azure/avm-res-documentdb-databaseaccount-module-contributors-bicep team will review it soon!