All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, adheres to Semantic Versioning, and is generated by Changie.
Important
This release is deprecating attributes in powerplatform_tenant_settings. They will be removed in next major (v5) release.
- #917 Extended powerplatform_enterprise_policy resource to support Identity policy type
- #1039 Deprecated tenant settings attributes: 'disable_survey_feedback', 'disable_nps_comments_reachout', 'disable_create_from_image', 'disable_create_from_figma' and 'enable_open_ai_bot_publishing'
- #922 Change error to warning when deactivating system user in Delete method for powerplatform_environment_application_admin resource
- #1035 Add import instructions and examples for billing_policy_environment, connection, connection_share, data_record, environment_group_rule_set, environment_settings, managed_environment, solution, tenant_isolation_policy, tenant_settings, and user resources
Important
This is a breaking release, powerplatform_managed_environment maker_onboarding_markdown and maker_onboarding_url are now removed.
- #1000 powerplatform_managed_environment removing no longer supported attributes (maker_onboarding_markdown, maker_onboarding_url) added new attributes (power_automate_is_sharing_disabled, copilot_allow_grant_editor_permissions_when_shared, copilot_limit_sharing_mode, copilot_max_limit_user_sharing)
- #931 Fixed error when environment is part of an Environment Group by adding warning instead of error when managed environment settings cannot be applied
- #984 Deprecate tenant_id attribute in tenant capacity data source and migrate to new API endpoint with expanded response structure
- #1006 Handle 404 status on environment read/delete as deleted resource instead of fatal error
- #943 Fixed custom connector URL patterns in data loss prevention policies to maintain correct order based on rule order property
- #928 Enhanced powerplatform_connectors data source to support filtering by environment_id
- #910 Extended powerplatform_environment_settings resource to support new AI-powered features including Copilot Studio settings, PowerApps Maker Bot, AI form fill capabilities, and natural language search features
- #877 update API permissions for Power Platform Provider documentation
- #878 update power catalog audience setting validation to include SpecificAdmins option and correct string validator option
- #828 Add support for Azure Developer CLI authentication via use_dev_cli provider configuration option and POWER_PLATFORM_USE_DEV_CLI environment variable
- #782 Add powerplatform_environment_application_admin resource to enable adding Entra service principals as application users with System Administrator role in Dataverse environments
- #781 support partner_id configuration and opt-out for default Terraform partner ID
- #867 powerplatform_tenant_capacity resource is now available in preview with user authentication support only
- #823 Improved error message formatting and consistency for better user experience across environment templates, tenant isolation policy, and tenant settings resources
- #860 Mark powerplatform_rest resource as deprecated. Known uses do not align with the intent of the resource. Please consider using specific resources for your use case, or opening a GitHub issue requesting a new resource for your use case.
- #806 Improved error handling in environment group services - fixed missing error wrapping, silent failures, and incorrect error messages
- #804 Fix pointer handling issues across codebase for better Go idioms
- #825 Fixed type safety and formatting issues including missing string validation, interface assertions, and escaped newline formatting
- #798 Fixed duplicated constants and literals issues across codebase to improve maintainability
- #808 Fixed recursive retry loops and missing return statements in environment services that could lead to infinite loops and data corruption. Added proper error wrapping for better debugging context.
- #810 fix: add proper API error wrapping and data conversion context across multiple services
- #812 fix: improve error handling for retry loops, state management, validators, and diagnostic reporting across 9 critical components to prevent silent failures and data corruption
- #814 Fixed missing return statements after error handling in three datasources to prevent potential panics and undefined behavior
- #815 Add missing nil pointer validation checks to prevent runtime panics in application API client, authorization resource, and environment models
- #816 Improved error handling and diagnostics across multiple services: fixed missing parameter context in connection shares error messages, proper error propagation in DLP policy helper functions, handled ignored errors in data record column conversion, and corrected misleading error messages in environment settings
- #817 Fixed JSON Marshal/Unmarshal issues: added empty response body validation, proper error handling for JSON marshaling, safe type assertions, and corrected Decode usage
- #818 Fixed infinite polling loop in environment wave UpdateFeature method by adding context deadline checking to respect timeout configuration
- #820 Improve code structure and maintainability by extracting deeply nested schema definitions into helper functions, reducing duplication in DTO conversion logic, and enhancing error handling for feature state mapping
- #821 Fixed validation and modifiers issues: improved error handling in validators and plan modifiers, corrected error messages for SHA256 checksums, and enhanced diagnostic context
- #824 Fix configuration and constants issues: CAE challenge detection strings, RX PowerApps Advisor API domain constants, and AuxiliaryTenantIDs type safety conversion
- #839 Fixed type assertion safety issues in multiple services to prevent potential runtime panics when API responses have unexpected structure or types
- #840 Fixed type assertion safety issues in DTO conversions and data transformations to prevent runtime panics. Added proper error handling for type assertions in tenant_settings, environment_group_rule_set, dlp_policy, and data_record services. Improved UUID type equality method to support both value and pointer types.
- #841 Fixed unsafe type assertions in provider data handling that could cause panics and misleading error messages
- #842 Fixed reflection and type safety issues in provider code. Replaced unsafe reflection usage in API client, improved error handling with Go 1.13+ patterns, and added validation for conversion functions to prevent runtime panics.
- #808 Fix recursive retry loops and missing return statements after AddError in environment services
- #775 Fixed issue when powerplatform_environment security_group_id validates unknown values incorrectly
- #702 Fix retryAfter function to properly handle all formats of Retry-After HTTP header as defined in RFC 7231
- #705 Replace panic with error handling in environment_settings models.go
- #707 Added nil check for HTTP response in doRequest method to prevent potential nil pointer dereference
- #708 Improve DeleteEnvironment function behavior: Handle 404 responses gracefully and adjust state management in Delete method
- #710 Fixed improper error handling by replacing err.Error() calls with properly wrapped errors using fmt.Errorf() with %w verb or directly passing the error object. This preserves error context and enables better debugging.
- #687 Fixed an issue where required field validation could fail incorrectly if the referenced field was missing or not unique in the configuration.
- #749 Nil pointer dereference in regex validation.
- #704 Replaced panic with proper error handling in ExecuteApiRequest function
- #756 fix: refine current value check in MakeFieldRequiredWhenOtherFieldDoesNotHaveValueValidator
- #767 feat: implement conflict handling and retry logic for environment operations
- #768 documentation for governance
- #719 Operation lifecycle operation continue on HTTP 409 responses
- #736 Include debug symbols in goreleaser builds by removing -s -w flags from ldflags
- #720 Corrected validator logic in OtherFieldRequiredWhenValueOfValidator to properly handle field comparison cases
- #703 Updated StringSliceToSet function to return an error instead of panicking when conversion fails
- #706 Replace panic calls with proper error handling in tenant_settings dto.go
- #709 Fixed misleading error message and debug log typos in the User resource
- #745 fix: add http.StatusConflict to API response handling in enterprise and managed environment services
- #741 Add security considerations guide
- #652 new
powerplatform_environment_wavethat allows to install newest wave update in an environment. Currently available only withuser authentication login - #306 Added Continuous Access Evaluation (CAE) checks
- #636 Updated resources with new default values
- #670 Added custom error message for lack of management application permissions
- #673 standardize the logging and error messages by replacing
ProviderTypeNamewithFullTypeName - #686 Update authorization header check in doRequest function
- #693 Add support for HTTP status code 499 in AddDataverseToEnvironment function
- #698 Improved file hashing to check if file is a real file and not a symbolic link
- #709 Fixed incorrect error message in
powerplatform_userdelete operation - #714 Enhance error handling for 403 & 404 WebApi responses
- #679 added documentation how to turn off Azure CLI telemetry
- #695 adding documentation and samples for Azure DevOps authentication with Workload Identity Federation.
- #566 Added the auxiliary tenant property to supported auth options
- #612 new
tenant_isolation_policyresource to enforce tenant isolation settings - #574 new
powerplatform_solution_checker_rulesdatasource for retrieving solution checker validation rules - #486 new
powerplatform_analytics_data_exportsdata source
- #650 updated descriptions for attributes
- #616
powerplatform_data_record: added meaningful error when record already exist and HTTP 405 is returned - #621 Lifecycle operation will retry if 'Failed' status was return.
- #622
powerplatform_user: added retry when user is not yet added to the dataverse
- #608 Added dynamic configuration guide to user documentation
- #243 Added Managed identity and Workload Identity Federation authentication
- #548
powerplatform_environmentadded explicit error when cannot provision new environment in a selected azure region - #551 added new
powerplatform_copilot_studio_application_insightsresource - #116
powerplatform_managed_environmentaddingsolution_checker_rule_overridesattribute that allows defining solution checker rules when enabling managed environment - #568
powerplatform_environmentenhance support for creating developer environment on behalf of a user - #572
powerplatform_environmentsupport get new features early with newrelease_cycleattribute - #576
powerplatform_environment_settingsadding additional IP firewall settings - #589
powerplatform_environmentaddingallow_bing_searchandallow_moving_data_across_regionsattributes
- #604
powerplatform_environmentattributesenvironment_group_idandbilling_policy_iduses empty guid00000000-0000-0000-0000-000000000000as no value, instead of ""
- #557
powerplatform_data_recordadding warning when something else than set is used for columns dynamic attribute - #565 Fixed issues with
powerplatform_environment_group_rule_setthrowing RuleSetInvalid error - #595
powerplatform_environmentfixing bug that updating display_name field triggers manager environment to enable itself
- #538 Improve documentation around powerplatform_environment_application_package_install resource
- #584 Correct
telemetry_optoutdocumentation about User-Agent header
- #478 adding powerplatform_enterprise_policy resource
- #488 powerplatform_user - added support for adding user to environments without dataverse created.
- #431 powerplatform_environment_settings adding log_retention_period_in_days.
- #508 powerplatform_environment - removed 'known-after-apply' state for attributes that do not change during update
- #518 powerplatform_data_loss_prevention_policy added additional validation for default_action_rule_behavior and action_rules when both are empty
- #513 Added documentation to environment_settings to mention using data_record and data_records to get environment settings from Dataverse
- #423 adding powerplatform_environment_group_rule_set. Currently not supported when using service principal authentication
- #499 Fixing issue that dlp policies does not apply all connectors and require reapply
- #502 powerplatform_environment fixed error during environment update when a custom domain is set
- #414 Improved documentation of
data_recordwith examples for app users, business units, teams, and roles
- #471 adding
unique_nametopowerplatform_environments&powerplatform_environment - #467 added
disable_on_destroyattribute topowerplatform_record
- #468
powerplatform_environment:environment_typechange triggers update not recreate - #477 Fixed
powerplatform_restresources that only have a destroy - #474 powerplatform_data_record invalid character '<' error when running apply
- #458
powerplatform_solution.settings_file_checksumis now generated using SHA256 instead of MD5. - #458
powerplatform_solution.solution_file_checksumis now generated using SHA256 instead of MD5. - #399
powerplatform_tenant_settings.idis now set to the tenant id instead of a random guid. This will cause a change in the id value of existing resources. - #412 Removed
powerplatform_solution.solution_nameproperty because it is no longer required or used by implementation - #457 Removed
idattribute from datasource_tenant_application_packages, datasource_securityroles, datasource_connection_shares, datasource_connections, datasource_connectors, datasource_currencies, datasource_dlp_policy, datasource_environments, datasource_environment_settings, datasource_environment_templates, datasource_languages, datasource_billing_policies, datasource_locations, datasource_environment_powerapps, datasource_solutions, datasource_tenant_settings
- #399 Environment Routing configuration added to
powerplatform_tenant_settings - #401
powerplatform_tenantdata source added to get information about current tenant - #401
powerplatform_tenant_capcitydata source added for capacity information - #408 User defined timeouts implemented for all resources
- #393
powerplatform_environment_groupresource added to support basic creation of environment groups (no rules yet)
- #458
powerplatform_rest.expected_http_statustype is changed from []int64 to []int. Practically, this should not affect any existing configurations. - #458
powerplatform_rest_query.expected_http_statustype is changed from []int64 to []int. Practically, this should not affect any existing configurations.