Skip to content

Commit 622d043

Browse files
authored
Merge pull request #2506 from Azure/revert-2447-sdkAuto/authorization_resource-manager
Revert "[ReleasePR authorization/resource-manager] Exposing membershipType property from Access review APIs"
2 parents 3a3ac96 + 733c8e4 commit 622d043

19 files changed

+5152
-0
lines changed
Lines changed: 187 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,187 @@
1+
{
2+
"id": "https://schema.management.azure.com/schemas/2015-07-01/Microsoft.Authorization.Authz.json#",
3+
"$schema": "http://json-schema.org/draft-04/schema#",
4+
"title": "Microsoft.Authorization",
5+
"description": "Microsoft Authorization Resource Types",
6+
"resourceDefinitions": {},
7+
"unknown_resourceDefinitions": {
8+
"roleAssignments": {
9+
"type": "object",
10+
"properties": {
11+
"apiVersion": {
12+
"type": "string",
13+
"enum": [
14+
"2015-07-01"
15+
]
16+
},
17+
"name": {
18+
"type": "string",
19+
"description": "A GUID for the role assignment to create. The name must be unique and different for each role assignment."
20+
},
21+
"properties": {
22+
"oneOf": [
23+
{
24+
"$ref": "#/definitions/RoleAssignmentProperties"
25+
},
26+
{
27+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
28+
}
29+
],
30+
"description": "Role assignment properties."
31+
},
32+
"type": {
33+
"type": "string",
34+
"enum": [
35+
"Microsoft.Authorization/roleAssignments"
36+
]
37+
}
38+
},
39+
"required": [
40+
"apiVersion",
41+
"name",
42+
"properties",
43+
"type"
44+
],
45+
"description": "Microsoft.Authorization/roleAssignments"
46+
},
47+
"roleDefinitions": {
48+
"type": "object",
49+
"properties": {
50+
"apiVersion": {
51+
"type": "string",
52+
"enum": [
53+
"2015-07-01"
54+
]
55+
},
56+
"name": {
57+
"type": "string",
58+
"description": "The ID of the role definition."
59+
},
60+
"properties": {
61+
"oneOf": [
62+
{
63+
"$ref": "#/definitions/RoleDefinitionProperties"
64+
},
65+
{
66+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
67+
}
68+
],
69+
"description": "Role definition properties."
70+
},
71+
"type": {
72+
"type": "string",
73+
"enum": [
74+
"Microsoft.Authorization/roleDefinitions"
75+
]
76+
}
77+
},
78+
"required": [
79+
"apiVersion",
80+
"name",
81+
"properties",
82+
"type"
83+
],
84+
"description": "Microsoft.Authorization/roleDefinitions"
85+
}
86+
},
87+
"definitions": {
88+
"Permission": {
89+
"type": "object",
90+
"properties": {
91+
"actions": {
92+
"oneOf": [
93+
{
94+
"type": "array",
95+
"items": {
96+
"type": "string"
97+
}
98+
},
99+
{
100+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
101+
}
102+
],
103+
"description": "Allowed actions."
104+
},
105+
"notActions": {
106+
"oneOf": [
107+
{
108+
"type": "array",
109+
"items": {
110+
"type": "string"
111+
}
112+
},
113+
{
114+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
115+
}
116+
],
117+
"description": "Denied actions."
118+
}
119+
},
120+
"description": "Role definition permissions."
121+
},
122+
"RoleAssignmentProperties": {
123+
"type": "object",
124+
"properties": {
125+
"principalId": {
126+
"type": "string",
127+
"description": "The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group."
128+
},
129+
"roleDefinitionId": {
130+
"type": "string",
131+
"description": "The role definition ID used in the role assignment."
132+
}
133+
},
134+
"required": [
135+
"principalId",
136+
"roleDefinitionId"
137+
],
138+
"description": "Role assignment properties."
139+
},
140+
"RoleDefinitionProperties": {
141+
"type": "object",
142+
"properties": {
143+
"assignableScopes": {
144+
"oneOf": [
145+
{
146+
"type": "array",
147+
"items": {
148+
"type": "string"
149+
}
150+
},
151+
{
152+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
153+
}
154+
],
155+
"description": "Role definition assignable scopes."
156+
},
157+
"description": {
158+
"type": "string",
159+
"description": "The role definition description."
160+
},
161+
"permissions": {
162+
"oneOf": [
163+
{
164+
"type": "array",
165+
"items": {
166+
"$ref": "#/definitions/Permission"
167+
}
168+
},
169+
{
170+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
171+
}
172+
],
173+
"description": "Role definition permissions."
174+
},
175+
"roleName": {
176+
"type": "string",
177+
"description": "The role name."
178+
},
179+
"type": {
180+
"type": "string",
181+
"description": "The role type."
182+
}
183+
},
184+
"description": "Role definition properties."
185+
}
186+
}
187+
}
Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,75 @@
1+
{
2+
"id": "https://schema.management.azure.com/schemas/2017-10-01-preview/Microsoft.Authorization.Authz.json#",
3+
"$schema": "http://json-schema.org/draft-04/schema#",
4+
"title": "Microsoft.Authorization",
5+
"description": "Microsoft Authorization Resource Types",
6+
"resourceDefinitions": {},
7+
"unknown_resourceDefinitions": {
8+
"roleAssignments": {
9+
"type": "object",
10+
"properties": {
11+
"apiVersion": {
12+
"type": "string",
13+
"enum": [
14+
"2017-10-01-preview"
15+
]
16+
},
17+
"name": {
18+
"type": "string",
19+
"description": "A GUID for the role assignment to create. The name must be unique and different for each role assignment."
20+
},
21+
"properties": {
22+
"oneOf": [
23+
{
24+
"$ref": "#/definitions/RoleAssignmentProperties"
25+
},
26+
{
27+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
28+
}
29+
],
30+
"description": "Role assignment properties."
31+
},
32+
"type": {
33+
"type": "string",
34+
"enum": [
35+
"Microsoft.Authorization/roleAssignments"
36+
]
37+
}
38+
},
39+
"required": [
40+
"apiVersion",
41+
"name",
42+
"properties",
43+
"type"
44+
],
45+
"description": "Microsoft.Authorization/roleAssignments"
46+
}
47+
},
48+
"definitions": {
49+
"RoleAssignmentProperties": {
50+
"type": "object",
51+
"properties": {
52+
"canDelegate": {
53+
"oneOf": [
54+
{
55+
"type": "boolean"
56+
},
57+
{
58+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
59+
}
60+
],
61+
"description": "The delegation flag used for creating a role assignment"
62+
},
63+
"principalId": {
64+
"type": "string",
65+
"description": "The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group."
66+
},
67+
"roleDefinitionId": {
68+
"type": "string",
69+
"description": "The role definition ID used in the role assignment."
70+
}
71+
},
72+
"description": "Role assignment properties."
73+
}
74+
}
75+
}

0 commit comments

Comments
 (0)