See my module for example: https://registry.terraform.io/modules/JustinGrote/azure-function-powershell/azurerm/ azure_active_directory_id is default=null, so it is an optional variable, but shows as required on the registry.