You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In this tutorial, learn how to programmatically fetch access policies that were created in Microsoft Purview. This can be used to troubleshoot the communication of policies between Microsoft Purview, where policies are created and updated and the data sources on which these policies are enforced.
16
+
In this tutorial, learn how to programmatically fetch access policies that were created in Microsoft Purview. With this you can troubleshoot the communication of policies between Microsoft Purview, where policies are created and updated and the data sources on which these policies are enforced.
17
17
This guide will use Arc-enabled SQL Server as an example of data source.
18
18
19
19
To get the necessary context about Microsoft Purview policies, see concept guides listed in [next-steps](#next-steps).
@@ -185,15 +185,15 @@ PolicySet associates Policy to a resource scope. Purview policy decision compute
185
185
|version|1|number|1||
186
186
|updatedAt||string|1|String representation of time in yyyy-MM-ddTHH:mm:ss.fffffffZ Ex: "2022-01-11T09:55:52.6472858Z"|
187
187
|preconditionRules||array[Object:Rule]|0..1||
188
-
|policyRefs||array[string]|1|List of policy Ids|
188
+
|policyRefs||array[string]|1|List of policy IDs|
189
189
190
190
### Policy
191
191
192
192
Policy specifies decision that should be emitted if the policy is applicable for the request provided request context attributes satisfy attribute predicates specified in the policy. Evaluation of policy triggers evaluation of AttributeRules referenced in the Policy.
193
193
194
194
|member|value|type|cardinality|description|
195
195
|------|-----|----|-----------|-----------|
196
-
|Id||string|1||
196
+
|ID||string|1||
197
197
|name||string|1||
198
198
|kind||string|1||
199
199
|version|1|number|1||
@@ -208,7 +208,7 @@ AttributeRule produces derived attributes and add them to request context attrib
208
208
209
209
|member|value|type|cardinality|description|
210
210
|------|-----|----|-----------|-----------|
211
-
|Id||string|1||
211
+
|ID||string|1||
212
212
|name||string|1||
213
213
|kind|AttributeRule|string|1||
214
214
|version|1|number|1||
@@ -222,8 +222,8 @@ AttributeRule produces derived attributes and add them to request context attrib
222
222
#### AttributePredicate
223
223
AttributePredicate checks whether predicate specified on an attribute is satisfied. AttributePredicate can specify the following properties:
224
224
- attributeName: specifies attribute name on which attribute predicate needs to be evaluated.
225
-
- matcherId: Identifier of matcher function that is used to compare the attribute value looked up in request context by the attribute name to the attribute value literal specified in the predicate. At present we support 2 matcherId(s): ExactMatcher, GlobMatcher. If matcherId isn't specified, it defaults to GlobMatcher.
226
-
- fromRule: optional property specifying the identifier of an AttributeRule that needs to be evaluated to populate the request context with attribute values that would be compared in this predicate.
225
+
- matcherId: ID of matcher function that is used to compare the attribute value looked up in request context by the attribute name to the attribute value literal specified in the predicate. At present we support 2 matcherId(s): ExactMatcher, GlobMatcher. If matcherId isn't specified, it defaults to GlobMatcher.
226
+
- fromRule: optional property specifying the ID of an AttributeRule that needs to be evaluated to populate the request context with attribute values that would be compared in this predicate.
227
227
- attributeValueIncludes: scalar literal value that should match the request context attribute values.
228
228
- attributeValueIncludedIn: array of literal values that should match the request context attribute values.
229
229
- attributeValueExcluded: scalar literal value that should not match the request context attribute values.
0 commit comments