Im trying to assign the role to my storage account, using the object IDs. One is the Entra ID group and the other one is the object ID of the access connector.

It happens that only access connector getting assigned correctly. but not the entra id

Below is my code:

storage_accounts = {
  adls = {
    "Storage Blob Data Contributor" = {
      data_factory = {
        keys = ["adf"]
      }
      object_ids = {
        keys = ["65a2f1c0-4529-4d72-b658-2ccf603fe51b","6eed4861-07e6-4046-a665-8e9d5d3d2c16"]
      }
    }
  }
}

And this is my error:

Error: authorization.RoleAssignmentsClient#Create: Failure responding to request: StatusCode=400 — Original Error: autorest/azure: Service returned an error. Status=400 Code=”GroupTypeNotSupported” Message=”Only security-enabled groups can be used in role assignments.”

storage_accounts = {
  adls = {
    "Storage Blob Data Contributor" = {
      data_factory = {
        keys = ["adf"]
      }
      object_ids = {
        keys = ["65a2f1c0-4529-4d72-b658-2ccf603fe51b","6eed4861-07e6-4046-a665-8e9d5d3d2c16"]
      }
    }
  }
}