为AppService授予Bing资源访问权限应配置的IAM角色咨询

要给AppService授予访问Microsoft.Bing/accounts@2020-06-10类型Bing资源的权限，需根据实际需求选择以下内置角色，对应的角色ID如下：

• Bing Search Service Contributor（读写权限）：角色ID为 b99c2118-1f07-4f25-9562-013d4873b3d9
• Bing Search Service Reader（只读权限）：角色ID为 24f8edb6-1668-4659-b5e2-40bb5f3a7d7e

将ARM模板中的xxx-xxx-xxx-xxx-xxx替换为上述对应ID即可，示例如下（以Contributor角色为例）：

var role = subscriptionResourceId(
  'Microsoft.Authorization/roleDefinitions',
  'b99c2118-1f07-4f25-9562-013d4873b3d9'
)

resource searchServiceIndexAppPermissions 'Microsoft.Authorization/roleAssignments@2020-04-01-preview' = {
  name: guid(bingSearch.id, webApp.name, role)
  scope: bingSearch
  properties: {
    principalId: webApp.identity.principalId
    principalType: 'ServicePrincipal'
    roleDefinitionId: role
  }
}

内容的提问来源于stack exchange，提问作者Kuniyoshi KAMIMURA