1
+ {
2
+ "id" : " https://schema.management.azure.com/schemas/2015-07-01/Microsoft.Authorization.Authz.json#" ,
3
+ "$schema" : " http://json-schema.org/draft-04/schema#" ,
4
+ "title" : " Microsoft.Authorization" ,
5
+ "description" : " Microsoft Authorization Resource Types" ,
6
+ "resourceDefinitions" : {},
7
+ "unknown_resourceDefinitions" : {
8
+ "roleAssignments" : {
9
+ "type" : " object" ,
10
+ "properties" : {
11
+ "apiVersion" : {
12
+ "type" : " string" ,
13
+ "enum" : [
14
+ " 2015-07-01"
15
+ ]
16
+ },
17
+ "name" : {
18
+ "type" : " string" ,
19
+ "description" : " A GUID for the role assignment to create. The name must be unique and different for each role assignment."
20
+ },
21
+ "properties" : {
22
+ "oneOf" : [
23
+ {
24
+ "$ref" : " #/definitions/RoleAssignmentProperties"
25
+ },
26
+ {
27
+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
28
+ }
29
+ ],
30
+ "description" : " Role assignment properties."
31
+ },
32
+ "type" : {
33
+ "type" : " string" ,
34
+ "enum" : [
35
+ " Microsoft.Authorization/roleAssignments"
36
+ ]
37
+ }
38
+ },
39
+ "required" : [
40
+ " apiVersion" ,
41
+ " name" ,
42
+ " properties" ,
43
+ " type"
44
+ ],
45
+ "description" : " Microsoft.Authorization/roleAssignments"
46
+ },
47
+ "roleDefinitions" : {
48
+ "type" : " object" ,
49
+ "properties" : {
50
+ "apiVersion" : {
51
+ "type" : " string" ,
52
+ "enum" : [
53
+ " 2015-07-01"
54
+ ]
55
+ },
56
+ "name" : {
57
+ "type" : " string" ,
58
+ "description" : " The ID of the role definition."
59
+ },
60
+ "properties" : {
61
+ "oneOf" : [
62
+ {
63
+ "$ref" : " #/definitions/RoleDefinitionProperties"
64
+ },
65
+ {
66
+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
67
+ }
68
+ ],
69
+ "description" : " Role definition properties."
70
+ },
71
+ "type" : {
72
+ "type" : " string" ,
73
+ "enum" : [
74
+ " Microsoft.Authorization/roleDefinitions"
75
+ ]
76
+ }
77
+ },
78
+ "required" : [
79
+ " apiVersion" ,
80
+ " name" ,
81
+ " properties" ,
82
+ " type"
83
+ ],
84
+ "description" : " Microsoft.Authorization/roleDefinitions"
85
+ }
86
+ },
87
+ "definitions" : {
88
+ "Permission" : {
89
+ "type" : " object" ,
90
+ "properties" : {
91
+ "actions" : {
92
+ "oneOf" : [
93
+ {
94
+ "type" : " array" ,
95
+ "items" : {
96
+ "type" : " string"
97
+ }
98
+ },
99
+ {
100
+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
101
+ }
102
+ ],
103
+ "description" : " Allowed actions."
104
+ },
105
+ "notActions" : {
106
+ "oneOf" : [
107
+ {
108
+ "type" : " array" ,
109
+ "items" : {
110
+ "type" : " string"
111
+ }
112
+ },
113
+ {
114
+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
115
+ }
116
+ ],
117
+ "description" : " Denied actions."
118
+ }
119
+ },
120
+ "description" : " Role definition permissions."
121
+ },
122
+ "RoleAssignmentProperties" : {
123
+ "type" : " object" ,
124
+ "properties" : {
125
+ "principalId" : {
126
+ "type" : " string" ,
127
+ "description" : " The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group."
128
+ },
129
+ "roleDefinitionId" : {
130
+ "type" : " string" ,
131
+ "description" : " The role definition ID used in the role assignment."
132
+ }
133
+ },
134
+ "required" : [
135
+ " principalId" ,
136
+ " roleDefinitionId"
137
+ ],
138
+ "description" : " Role assignment properties."
139
+ },
140
+ "RoleDefinitionProperties" : {
141
+ "type" : " object" ,
142
+ "properties" : {
143
+ "assignableScopes" : {
144
+ "oneOf" : [
145
+ {
146
+ "type" : " array" ,
147
+ "items" : {
148
+ "type" : " string"
149
+ }
150
+ },
151
+ {
152
+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
153
+ }
154
+ ],
155
+ "description" : " Role definition assignable scopes."
156
+ },
157
+ "description" : {
158
+ "type" : " string" ,
159
+ "description" : " The role definition description."
160
+ },
161
+ "permissions" : {
162
+ "oneOf" : [
163
+ {
164
+ "type" : " array" ,
165
+ "items" : {
166
+ "$ref" : " #/definitions/Permission"
167
+ }
168
+ },
169
+ {
170
+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
171
+ }
172
+ ],
173
+ "description" : " Role definition permissions."
174
+ },
175
+ "roleName" : {
176
+ "type" : " string" ,
177
+ "description" : " The role name."
178
+ },
179
+ "type" : {
180
+ "type" : " string" ,
181
+ "description" : " The role type."
182
+ }
183
+ },
184
+ "description" : " Role definition properties."
185
+ }
186
+ }
187
+ }
0 commit comments