Subscription moving to management group of management/identity/connectivity when using subscription_id_management

[ofbjansen]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Versions

terraform: 1.0.0

azure provider: 2.46.1

module: caf-enterprise-scale

Description

Describe the bug

When using the variable to add a subscription ID to the subscription_id_management or subscription_id_identity or subscription_id_connectivity to have the policy assignments point to the correct log analytuics in the right subscription, the subscription is moved to that management group. In version 0.3.1 it was not the case. In my case the subscription moved from root to mangement to identity to connectivity management group. When leaving the variable empty the policy assignment will not be created and error out. For example the policy parameter will try to link a resources to "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/demo-mgmt-rg/providers/Microsoft.OperationalInsights/workspaces/demo-la" (this as an example).

Steps to Reproduce

create module and and put in a subscription for one or all of the subscription_id_* variables. This will move the subscription arround.

change the module to have no subscription and the module will create assignments with subscription id 00000000-0000-0000-0000-000000000000

Screenshots

Additional context