anchor.diff:  
   [source]
   ----
  +az role assignment create --assignee http://example.com/jenkins-terraform \
  +                            --role Owner \
  +                            --scope /subscriptions/be53081d-a3a2-499c-b355-8f5c3d4126e5
  +----
   
  +
  +
  +=== Creating the variables file
  +
  +
  +Create `.azure-terraform.json` in the root directory of this repository
  +containing:
  +
  +[source, json]
   ----
  +{
  +    "subscription_id" : "",
  +    "client_id"       : "",
  +    "client_secret"   : "",
  +    "tenant_id"       : ""
  +}
  +----
  +
  +Where (assuming your subscription is named "Pay-As-You-Go"):
  +
  +* `subscription_id` is the output of: `az account list -o tsv --query "[?name=='Pay-As-You-Go'].id"`
  +* `client_id` is the output of: `az ad app list -o tsv --query "[?displayName=='jenkins-terraform'].appId"`
  +* `client_secret` is the `$GENERATED_TOKEN` you created with `openssl` previously
  +* `tenant_id` is the output of: `az account list -o tsv --query "[?name=='Pay-As-You-Go'].tenantId"`
  
positive.code: ----
  
  
  We can then retrieve the Application's ID, this assumes the
  link:https://stedolan.github.io/jq/[jq]
  tool is installed:
  
  [source]
  ----
  az ad app list -o json | jq -r '.[] | select(.displayName | contains("jenkins-terraform")) | .appId'
  ----
  
  
  
negative.code: 
  [source]
  ----
  az ad sp create --id $(az ad app list -o tsv --query "[?displayName=='jenkins-terraform'].appId"`)
  ----
  
  
  