适用于逻辑应用的 ARM 模板 Office 365 连接

Question

我有一个逻辑应用程序，我试图通过一个ARM模板自动化。

逻辑应用需要连接到 Office 365。下面是从 Azure 门户的自动化窗格生成的连接的模板。

当我运行脚本时，它失败 - Azure 订阅和 Office 365 订阅之间存在身份验证问题。

链接授权失败

客户端有权执行操作“Microsoft。作用域上的web/locations/managed API/join/action...但是，当前租户“curr-tenant-guid”无权访问链接订阅“linked-sub-guid”...

我无法创建此信任来自动执行预配，但我想将连接创建为占位符，以便可以部署逻辑应用，并且可以返回到门户来授权连接。这可能吗？还有其他选择吗？

 {
      "comments": "Office 365 user for file monitoring",
      "type": "Microsoft.Web/connections",
      "name": "MyOffice365User",
      "apiVersion": "2016-06-01",
      "location": "northeurope",
      "scale": null,
      "properties": {
        "displayName": "[e-mail]",
        "customParameterValues": {},
        "api": {
          "id": "[concat('/subscriptions/a6720ff8-f7cb-4bc8-a542-e7868767686/providers/Microsoft.Web/locations/northeurope/managedApis/', 'MyOffice365User')]"
        }
      },
      "dependsOn": []
    }

Answer 1

使用以下链接安装logic app工具，该工具有助于设计工作流https://marketplace.visualstudio.com/items?itemName = VinaySinghMSFT。azurelogicappstoolsforvisual studio-18551

完成后，您可以创建 Office 365 连接器，当您打开 ARM 模板时，您可以在 ARM 模板中看到 o365 组件。我的模板看起来像：-

{
  "type": "MICROSOFT.WEB/CONNECTIONS",
  "apiVersion": "2016-06-01",
  "name": "[parameters('office365_1_Connection_Name')]",
  "location": "[parameters('location')]",
  "properties": {
    "api": {
      "id": "[concat(subscription().id, '/providers/Microsoft.Web/locations/', parameters('location'), '/managedApis/', 'office365')]"
    },
    "displayName": "[parameters('office36`enter code here`5_1_Connection_DisplayName')]"
  }
}

"triggers": {
            "When_a_new_event_is_created_(V2)": {
              "type": "ApiConnection",
              "inputs": {
                "host": {
                  "connection": {
                    "name": "@parameters('$connections')['office365']['connectionId']"
                  }
                },
                "method": "get",
                "path": "/datasets/calendars/v2/tables/@{encodeURIComponent(encodeURIComponent('AAMkNbPwESLK3F8s5n1Q3BwAhXXXXXXXXXXXXXXXXXXXXXXXXXXX'))}/onnewitems"
              },
              "recurrence": {
                "frequency": "Minute",
                "interval": 1
              },
              "splitOn": "@triggerBody()?['value']"
            }
          }

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =以及工作流的参数

"parameters": {
          "$connections": {
            "value": {
              "office365": {
                "id": "[concat(subscription().id, '/providers/Microsoft.Web/locations/', parameters('location'), '/managedApis/', 'office365')]",
                "connectionId": "[resourceId('Microsoft.Web/connections', parameters('office365_1_Connection_Name'))]",
                "connectionName": "[parameters('office365_1_Connection_Name')]"
              }

================================================================

Answer 2

我发现了三个与同一个问题相关的帖子：

• 使用ARM模板/powershell部署逻辑应用程序
• Azure Logic Apps-用于部署文件系统API连接的ARM模板
• 如何在ARM模板中设置Service Bus Logic App操作的连接字符串

所有API连接都存在同样的问题。访问特定服务的连接参数存储在Azure上，当您尝试导出ARM模板时，没有关于这些特定参数的任何内容(这使得sens as Azure不会暴露您的秘密、密码...).

诀窍是查询Azure资源管理API，以返回逻辑应用程序中任何连接所需的参数。

只需按照本文中的说明进行操作：

• 在逻辑应用预览版刷新中进行部署