AzureBreaking change
avm-res-managedidentity-userassignedidentity 0.6.0: breaking changes
Release date of version 0.6.0 of the Azure Verified Module avm-res-managedidentity-userassignedidentity: 27 Oct 2026. Breaking changes listed in the release notes: 4.
Breaking since , 27 Oct 2026
What breaks
Breaking changes listed in the release notes:
- Rename role_assignments to outbound_role_assignments in every module call; the old argument is no longer accepted. Preserve the existing map keys and values. These remain outbound grants to the created identity at each supplied scope, not grants to other principals on the identity. The resource block remains azurerm_role_assignment.this, so the input rename alone does not require state moves.
- Outbound role assignment description is now applied instead of ignored. AzureRM treats description changes as replacement, so existing non-null descriptions can replace assignments on upgrade. Inspect the plan for resulting access changes. Other role attributes and their existing null defaults remain unchanged.
- enable_telemetry remains true by default. Enabled telemetry creates an empty Incremental Microsoft.Resources/deployments resource at the AzAPI provider subscription, using the existing required real region. Subscription deployment-management permissions are required; resource-group-only permissions may be insufficient. Owner is not specifically required. Configure the intended AzAPI subscription or set enable_telemetry=false. Deployment-history records and plan-timestamp updates are new behavior.
- ModTM and telemetry-only root random requirements are removed. removed blocks with destroy=false request forgetting the old telemetry resources without destruction. Workload addresses are preserved; historical-state migration has not been exercised. Back up state and inspect the upgrade plan, especially outbound assignment descriptions, before applying.
Who is affected
Affected versions
0.6.0
What to do
- Breaking changes listed in the release notes for 0.6.0: 4. HashiCorp recommends explicitly constraining the acceptable version numbers to avoid unexpected or unwanted changes.
- Check the
versionargument of the module block that installs avm-res-managedidentity-userassignedidentity from the Terraform Registry. Terraform uses the newest installed version that meets the constraint. When no acceptable version is installed, it downloads the newest version that meets the constraint, so a constraint that allows 0.6.0 can bring in this release. A module block with noversionargument defaults to the latest version available from the source. - The AVM versioning specification requires that, until a module's first major version 1.0.0 is released, the minor version is bumped for breaking changes and the major version is not bumped.
- To stay on an earlier version for now, require a specific version. HashiCorp recommends this for third-party modules so that updates only happen when convenient to you.
- To adopt 0.6.0, set the
versionargument to it, then runterraform initso that Terraform can update the local code.
Replacement
Not stated by vendor.
Sources
- Official sourcegithub.comOfficial
- Additional sourceregistry.terraform.ioOfficial
Last checked against the first source in this list on .
Related
avm-res-managedidentity-userassignedidentitybreaking changes by version
- , 15 Sep 2026avm-res-web-site 0.23.0: breaking changesSource
- , 7 Oct 2026avm-res-network-networksecuritygroup 0.6.0: breaking changesSource
- , 12 Oct 2026avm-res-web-site 0.24.0: breaking changesSource
- , 22 Oct 2026avm-res-network-privateendpoint 0.3.0: breaking changesSource
- , 27 Oct 2026avm-res-network-routetable 0.6.0: breaking changesSource
- , 29 Oct 2026avm-res-containerregistry-registry 0.9.0: breaking changesSource
Found an error? Report it
The text on this page is drafted with AI assistance from the vendor's text, checked against the official source and approved by a person before it is published. How items are written
Last checked · Added · Changelog for this item