quickstart/201-web-app-docker-acr/azurerm_role_assignment.tf (5 lines of code) (raw):

resource "azurerm_role_assignment" "acr" { scope = azurerm_app_service_plan.default.id role_definition_name = "Reader" principal_id = azurerm_app_service.main.identity[0].principal_id }