Skip to content

Include Azure AI Project Manager and Azure AI Account Owner in developer RBAC role-assignment-write preflight#7808

Merged
rajeshkamal5050 merged 3 commits into
mainfrom
copilot/add-azure-ai-project-manager-role
Apr 20, 2026
Merged

Include Azure AI Project Manager and Azure AI Account Owner in developer RBAC role-assignment-write preflight#7808
rajeshkamal5050 merged 3 commits into
mainfrom
copilot/add-azure-ai-project-manager-role

Conversation

Copilot AI commented Apr 20, 2026

Copy link
Copy Markdown
Contributor
  • Add roleAzureAIProjectManager constant (eadc314b-1a2d-4efa-be10-5d325db5065e) in developer_rbac_check.go
  • Add roleAzureAIAccountOwner constant (e47c6f54-e4a2-4754-9501-8e0985b135e1) in developer_rbac_check.go
  • Include both in sufficientRoleAssignWriteRoles
  • Update the missing-role suggestion text to list Azure AI Project Manager and Azure AI Account Owner
  • Extend TestDeveloperRBACRoleConstants / TestSufficientRoleLists
  • go build + go test for the extension

Fixes #7812

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the azure.ai.agents extension’s developer RBAC preflight so users with the Azure AI Project Manager built-in role don’t get false negatives when validating Microsoft.Authorization/roleAssignments/write permissions on the Foundry Project scope, and releases a new preview version containing the fix.

Changes:

  • Add roleAzureAIProjectManager and include it in the “roleAssignments/write” sufficient role list and user-facing guidance.
  • Extend unit tests to assert the new role constant and list membership.
  • Bump extension version to 0.1.25-preview and add release notes.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
cli/azd/extensions/azure.ai.agents/internal/project/developer_rbac_check.go Adds Azure AI Project Manager role ID to the roleAssignments/write preflight allowlist and suggestion text.
cli/azd/extensions/azure.ai.agents/internal/project/developer_rbac_check_test.go Updates assertions to cover the new role constant and sufficient role list.
cli/azd/extensions/azure.ai.agents/version.txt Bumps extension version to 0.1.25-preview.
cli/azd/extensions/azure.ai.agents/extension.yaml Keeps extension manifest version in sync with version.txt.
cli/azd/extensions/azure.ai.agents/CHANGELOG.md Adds 0.1.25-preview entry describing the RBAC preflight fix.

Copilot AI requested a review from ankitbko April 20, 2026 05:01
@ankitbko

Copy link
Copy Markdown
Member

@copilot Can you remove the changelog and extension.yaml, and version. Text changes

Copilot AI commented Apr 20, 2026

Copy link
Copy Markdown
Contributor Author

@copilot Can you remove the changelog and extension.yaml, and version. Text changes

Reverted CHANGELOG.md, extension.yaml, and version.txt in c51d1de.

Copilot AI changed the title Include Azure AI Project Manager in developer RBAC role-assignment-write preflight Include Azure AI Project Manager and Azure AI Account Owner in developer RBAC role-assignment-write preflight Apr 20, 2026
@therealjohn

Copy link
Copy Markdown
Contributor

/check-enforcer override

@github-actions

Copy link
Copy Markdown

📋 Prioritization Note

Thanks for the contribution! The linked issue isn't in the current milestone yet.
Review may take a bit longer — reach out to @rajeshkamal5050 or @kristenwomack if you'd like to discuss prioritization.

@rajeshkamal5050 rajeshkamal5050 added release-activity Release tracking skip-governance Skip PR governance checks labels Apr 20, 2026
@rajeshkamal5050
rajeshkamal5050 merged commit dd2130c into main Apr 20, 2026
20 of 23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release-activity Release tracking skip-governance Skip PR governance checks

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Azure AI Project Manager and Azure AI Account Owner missing in rbac checks

6 participants