v2.39.0

IMPROVEMENTS:

• dependencies: updating to v0.20230511.1094507 of github.com/hashicorp/go-azure-sdk (#1100)

BUG FIXES:

• provider: fix a token refresh bug that could cause authentication errors after initial token expiry (#1100)

v2.38.0

FEATURES:

• New Data Source: azuread_access_package_catalog_role (#1033)
• New Resource: azuread_access_package_catalog_role_assignment (#1033)

BUG FIXES:

• Provider: fix an issue where API requests might not be retried correctly (#1090)
• azuread_service_principal_token_signing_certificate - fix a crash when importing legacy certificates (#1082)

v2.37.2

BUG FIXES:

• azuread_group - remove conditional ForceNew for the onpremises_group_type property, resolve breaking change in v2.37.1 (#1076)
• azuread_group - improve a workaround for reading Microsoft 365-only properties for groups in a non-M365 tenant (#1076)
• azuread_group - improve a workaround for detecting unwanted changes to the description property (#1074)

v2.37.1

BUG FIXES:

• azuread_group - fix a regression that caused onpremises_group_type to be set when not configured, and unsetting this property now forces replacement of the resource (#1070)

v2.37.0

FEATURES:

• New Data Source: azuread_access_package (#903)
• New Data Source: azuread_access_package_catalog (#903)
• New Resource: azuread_access_package (#903)
• New Resource: azuread_access_package_assignment_policy (#903)
• New Resource: azuread_access_package_catalog (#903)
• New Resource: azuread_access_package_resource_catalog_association (#903)
• New Resource: azuread_access_package_resource_package_association (#903)
• New Resource: azuread_administrative_unit_role_member (#983)
• New Resource: azuread_user_flow_attribute (#1063)

IMPROVEMENTS:

• dependencies: updating to v0.60.0 of github.com/manicminer/hamilton (#1062)
• data.azuread_application - support for the service_management_reference attribute (#1046)
• data.azuread_group - support for the onpremises_group_type and writeback_enabled attributes (#964)
• data.azuread_user - support for the mail property (#996)
• azuread_application - support for the service_management_reference property (#1046)
• azuread_group - support for the onpremises_group_type and writeback_enabled properties (#964)

v2.36.0

IMPROVEMENTS:

• Provider: requests to Microsoft Graph no longer include the tenant ID as part of the URI path (#1039)

BUG FIXES:

• azuread_group - work around an API issue that prevented group creation for some configurations where the calling principal is specified as an owner (#1037)

v2.35.0

BUG FIXES:

• azuread_application_federated_identity_credential - the audiences property now only supports a single value due to a breaking API change (#1027)
• azuread_group - only try to set additional fields when explicitly configured, to work around an API bug when application-only permissions are used (#1028)
• azuread_service_principal - resolve an issue where newly created service principals might not be found when specifying use_existing = true (#1025)

IMPROVEMENTS:

• Provider: support for the metadata_host property (#1026)
• Provider: authentication now uses the github.com/hashicorp/go-azure-sdk/sdk/auth package (#1026)
• Provider: cloud configuration now uses the github.com/hashicorp/go-azure-sdk/sdk/environments package (#1026)
• data.azuread_application - support for the notes attribute (#1027)
• data.azuread_directory_roles - support for the template_ids attribute (#1011)
• azuread_application - support for the notes property (#1027)
• azuread_group - support for the administrative_unit_ids property (#984)
• azuread_synchronization_job - fix a bug where the incorrect API version was used, preventing this resource from working properly (#1030)
• azuread_synchronization_secret - fix a bug where the incorrect API version was used, preventing this resource from working properly (#1030)

v2.34.1

BUG FIXES:

• azuread_administrative_unit - revert to the Microsoft Graph beta API version to resolve an API error when using this resource (#1023)
• azuread_application - revert to the Microsoft Graph beta API version to resolve an issue preventing creation of new applications (#1023)
• azuread_application - revert to the Microsoft Graph beta API version to resolve an issue preventing setting the oauth2_post_response_required property (#1023)
• azuread_application_pre_authorized - revert to the Microsoft Graph beta API version to resolve an issue creating this resource (#1023)
• azuread_group - revert to the Microsoft Graph beta API version to resolve an issue when managing group members (#1023)
• azuread_group_member - revert to the Microsoft Graph beta API version to resolve an issue when managing group members (#1023)
• azuread_user - revert to the Microsoft Graph beta API version to resolve a persistent diff for the account_enabled and show_in_address_list properties (#1023)

v2.34.0

IMPROVEMENTS:

• Provider: All resources will now explicitly use the Microsoft Graph v1.0 API unless stated otherwise in the provider documentation (#990)
• data.azuread_application - support the description attribute (#991)
• azuread_application - support app role and scope values up to 249 characters (#1010)

BUG FIXES:

• Provider: Support authentication scenarios where the oid claim is missing from the access token (#1014)
• data.azuread_application_template - revert a workaround from v2.31.0 and no longer use the beta API for this data source (#987)
• azuread_application - work around an API bug where mapped_claims_enabled could be set on create when holding the Application.ReadWrite.OwnedBy role (#1008)

v2.33.0

FEATURES:

• New Resource: azuread_service_principal_token_signing_certificate (#968)

IMPROVEMENTS:

• azuread_application - support the description property (#977)

BUG FIXES:

• azuread_service_principal_delegated_permission_grant - fix a bug that caused state refreshes to fail if the resource is edited outside Terraform (#981)
• azuread_group - fix a validation bug to allow periods (.) in the mail_nickname property (#979)
• azuread_group - fix a bug that prevents replacing a group when prevent_duplicate_names = true (#980)
• azuread_group - set the display_name property correctly on creation so that triggered notification emails are correct (#982)