如何在C#中以编程方式将服务主体分配给工作区

using Microsoft.Azure.Management.ResourceManager;
using Microsoft.Azure.Management.ResourceManager.Models;
using Microsoft.Azure.Management.Workspaces;
using Microsoft.Azure.Management.Workspaces.Models;
using Microsoft.IdentityModel.Clients.ActiveDirectory;
using Microsoft.Rest;

public class Program
{
    public static void Main(string[] args)
    {
        // 设置Azure AD租户ID、订阅ID、服务主体相关信息
        string tenantId = "<Azure AD Tenant ID>";
        string subscriptionId = "<Azure Subscription ID>";
        string clientId = "<Service Principal Client ID>";
        string clientSecret = "<Service Principal Client Secret>";

        // 创建认证凭据
        var credentials = GetCredentials(tenantId, clientId, clientSecret);

        // 创建资源管理器客户端
        var resourceClient = new ResourceManagementClient(credentials)
        {
            SubscriptionId = subscriptionId
        };

        // 创建工作区管理器客户端
        var workspaceClient = new OperationalInsightsManagementClient(credentials)
        {
            SubscriptionId = subscriptionId
        };

        // 设置工作区名称和资源组名称
        string workspaceName = "<Workspace Name>";
        string resourceGroupName = "<Resource Group Name>";

        // 创建资源组
        resourceClient.ResourceGroups.CreateOrUpdate(resourceGroupName, new ResourceGroup());

        // 创建工作区
        workspaceClient.Workspaces.CreateOrUpdate(resourceGroupName, workspaceName, new Workspace());

        // 将服务主体分配给工作区
        workspaceClient.WorkspacePolicies.CreateOrUpdate(resourceGroupName, workspaceName, new WorkspacePolicies
        {
            WorkspaceId = workspaceClient.Workspaces.Get(resourceGroupName, workspaceName).Id,
            PrincipalId = credentials.ClientId,
            PrincipalType = "ServicePrincipal"
        });

        Console.WriteLine("Service principal assigned to workspace successfully.");
    }

    private static ServiceClientCredentials GetCredentials(string tenantId, string clientId, string clientSecret)
    {
        var context = new AuthenticationContext($"https://login.microsoftonline.com/{tenantId}");
        var clientCredential = new ClientCredential(clientId, clientSecret);
        var result = context.AcquireTokenAsync("https://management.azure.com/", clientCredential).Result;

        if (result == null)
        {
            throw new InvalidOperationException("Failed to obtain the JWT token");
        }

        return new TokenCredentials(result.AccessToken);
    }
}