Microsoft.Search (preview:2025-10-01)

2025/09/29 • 6 updated methods

Services_CreateOrUpdate (updated)
Description :  Creates or updates a search service in the given resource group. If the search service already exists, all properties will be updated with the given values.
Reference :  Link ¶

⚶ Changes

{
  "#id": "Services_CreateOrUpdate",
  "$parameters": {
    "service": {
      "$properties": {
        "properties": [
          {
            "#name": "hostingMode",
            "Description": {
              "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
              "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
            },
            "Enum": {
              "new": [
                [
                  "Default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "HighDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ],
              "old": [
                [
                  "default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "highDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ]
            }
          },
          {
            "#name": "computeType",
            "Enum": {
              "new": [
                [
                  "Default",
                  "Create the service with the Default Compute."
                ],
                [
                  "Confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ],
              "old": [
                [
                  "default",
                  "Create the service with the Default Compute."
                ],
                [
                  "confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ]
            }
          },
          {
            "#name": "publicNetworkAccess",
            "Description": {
              "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
              "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
            },
            "Enum": {
              "new": [
                [
                  "Enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "Disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ],
              "old": [
                [
                  "enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ]
            }
          }
        ]
      }
    }
  },
  "$responses": {
    "200": {
      "$properties": {
        "properties": [
          {
            "#name": "hostingMode",
            "Description": {
              "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
              "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
            },
            "Enum": {
              "new": [
                [
                  "Default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "HighDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ],
              "old": [
                [
                  "default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "highDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ]
            }
          },
          {
            "#name": "computeType",
            "Enum": {
              "new": [
                [
                  "Default",
                  "Create the service with the Default Compute."
                ],
                [
                  "Confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ],
              "old": [
                [
                  "default",
                  "Create the service with the Default Compute."
                ],
                [
                  "confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ]
            }
          },
          {
            "#name": "publicNetworkAccess",
            "Description": {
              "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
              "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
            },
            "Enum": {
              "new": [
                [
                  "Enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "Disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ],
              "old": [
                [
                  "enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ]
            }
          }
        ]
      }
    },
    "201": {
      "$properties": {
        "properties": [
          {
            "#name": "hostingMode",
            "Description": {
              "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
              "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
            },
            "Enum": {
              "new": [
                [
                  "Default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "HighDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ],
              "old": [
                [
                  "default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "highDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ]
            }
          },
          {
            "#name": "computeType",
            "Enum": {
              "new": [
                [
                  "Default",
                  "Create the service with the Default Compute."
                ],
                [
                  "Confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ],
              "old": [
                [
                  "default",
                  "Create the service with the Default Compute."
                ],
                [
                  "confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ]
            }
          },
          {
            "#name": "publicNetworkAccess",
            "Description": {
              "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
              "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
            },
            "Enum": {
              "new": [
                [
                  "Enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "Disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ],
              "old": [
                [
                  "enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ]
            }
          }
        ]
      }
    }
  }
}

⚼ Request

PUT:  /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Search/searchServices/{searchServiceName}
{
resourceGroupName:
{
Description: The name of the resource group. The name is case insensitive. ,
Required: True ,
}
string ,
searchServiceName:
{
Description: The name of the Azure AI Search service to create or update. Search service names must only contain lowercase letters, digits or dashes, cannot use dash as the first two or last one characters, cannot contain consecutive dashes, and must be between 2 and 60 characters in length. Search service names must be unique since they are part of the service URI (https://.search.windows.net). You cannot change the service name after the service is created. ,
Required: True ,
}
string ,
service:
{
Description: The definition of the search service to create or update. ,
Required: True ,
}
{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}
,
x-ms-client-request-id:
{
Description: A client-generated GUID value that identifies this request. If specified, this will be included in response information as a way to track the request. ,
Format: uuid ,
Required: False ,
}
string ,
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
subscriptionId:
{
Description: The unique identifier for a Microsoft Azure subscription. You can obtain this value from the Azure Resource Manager API or the portal. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}

⚐ Response (201)

{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}

⚐ Response (default)

{
error:
{
Description: Describes a particular API error with an error code and a message. ,
Required: False ,
}
{
code:
{
Description: An error code that describes the error condition more precisely than an HTTP status code. Can be used to programmatically handle specific error cases. ,
Required: False ,
}
string ,
message:
{
Description: A message that describes the error in detail and provides debugging information. ,
Required: False ,
}
string ,
target:
{
Description: The target of the particular error (for example, the name of the property in error). ,
Required: False ,
}
string ,
details:
{
Description: Contains nested errors that are related to this error. ,
Required: False ,
}
[
string ,
]
,
}
,
message:
{
Description: A brief description of the error that hints at what went wrong (for details/debugging information refer to the 'error.message' property). ,
Required: False ,
}
string ,
}
Services_Update (updated)
Description :  Updates an existing search service in the given resource group.
Reference :  Link ¶

⚶ Changes

{
  "#id": "Services_Update",
  "$parameters": {
    "service": {
      "$properties": {
        "properties": [
          {
            "#name": "hostingMode",
            "Description": {
              "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
              "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
            },
            "Enum": {
              "new": [
                [
                  "Default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "HighDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ],
              "old": [
                [
                  "default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "highDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ]
            }
          },
          {
            "#name": "computeType",
            "Enum": {
              "new": [
                [
                  "Default",
                  "Create the service with the Default Compute."
                ],
                [
                  "Confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ],
              "old": [
                [
                  "default",
                  "Create the service with the Default Compute."
                ],
                [
                  "confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ]
            }
          },
          {
            "#name": "publicNetworkAccess",
            "Description": {
              "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
              "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
            },
            "Enum": {
              "new": [
                [
                  "Enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "Disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ],
              "old": [
                [
                  "enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ]
            }
          }
        ]
      }
    }
  },
  "$responses": {
    "200": {
      "$properties": {
        "properties": [
          {
            "#name": "hostingMode",
            "Description": {
              "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
              "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
            },
            "Enum": {
              "new": [
                [
                  "Default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "HighDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ],
              "old": [
                [
                  "default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "highDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ]
            }
          },
          {
            "#name": "computeType",
            "Enum": {
              "new": [
                [
                  "Default",
                  "Create the service with the Default Compute."
                ],
                [
                  "Confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ],
              "old": [
                [
                  "default",
                  "Create the service with the Default Compute."
                ],
                [
                  "confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ]
            }
          },
          {
            "#name": "publicNetworkAccess",
            "Description": {
              "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
              "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
            },
            "Enum": {
              "new": [
                [
                  "Enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "Disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ],
              "old": [
                [
                  "enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ]
            }
          }
        ]
      }
    }
  }
}

⚼ Request

PATCH:  /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Search/searchServices/{searchServiceName}
{
resourceGroupName:
{
Description: The name of the resource group. The name is case insensitive. ,
Required: True ,
}
string ,
searchServiceName:
{
Description: The name of the Azure AI Search service to update. ,
Required: True ,
}
string ,
service:
{
Description: The definition of the search service to update. ,
Required: True ,
}
{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
location:
{
Description: The geographic location of the resource. This must be one of the supported and registered Azure geo regions (for example, West US, East US, Southeast Asia, and so forth). This property is required when creating a new resource. ,
Required: False ,
}
string ,
tags:
{
Description: Tags to help categorize the resource in the Azure portal. ,
Required: False ,
}
object ,
identity:
{
Description: Details about the search service identity. A null value indicates that the search service has no identity assigned. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}
,
x-ms-client-request-id:
{
Description: A client-generated GUID value that identifies this request. If specified, this will be included in response information as a way to track the request. ,
Format: uuid ,
Required: False ,
}
string ,
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
subscriptionId:
{
Description: The unique identifier for a Microsoft Azure subscription. You can obtain this value from the Azure Resource Manager API or the portal. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}

⚐ Response (default)

{
error:
{
Description: Describes a particular API error with an error code and a message. ,
Required: False ,
}
{
code:
{
Description: An error code that describes the error condition more precisely than an HTTP status code. Can be used to programmatically handle specific error cases. ,
Required: False ,
}
string ,
message:
{
Description: A message that describes the error in detail and provides debugging information. ,
Required: False ,
}
string ,
target:
{
Description: The target of the particular error (for example, the name of the property in error). ,
Required: False ,
}
string ,
details:
{
Description: Contains nested errors that are related to this error. ,
Required: False ,
}
[
string ,
]
,
}
,
message:
{
Description: A brief description of the error that hints at what went wrong (for details/debugging information refer to the 'error.message' property). ,
Required: False ,
}
string ,
}
Services_Get (updated)
Description :  Gets the search service with the given name in the given resource group.
Reference :  Link ¶

⚶ Changes

{
  "#id": "Services_Get",
  "$responses": {
    "200": {
      "$properties": {
        "properties": [
          {
            "#name": "hostingMode",
            "Description": {
              "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
              "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
            },
            "Enum": {
              "new": [
                [
                  "Default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "HighDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ],
              "old": [
                [
                  "default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "highDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ]
            }
          },
          {
            "#name": "computeType",
            "Enum": {
              "new": [
                [
                  "Default",
                  "Create the service with the Default Compute."
                ],
                [
                  "Confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ],
              "old": [
                [
                  "default",
                  "Create the service with the Default Compute."
                ],
                [
                  "confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ]
            }
          },
          {
            "#name": "publicNetworkAccess",
            "Description": {
              "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
              "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
            },
            "Enum": {
              "new": [
                [
                  "Enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "Disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ],
              "old": [
                [
                  "enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ]
            }
          }
        ]
      }
    }
  }
}

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Search/searchServices/{searchServiceName}
{
resourceGroupName:
{
Description: The name of the resource group. The name is case insensitive. ,
Required: True ,
}
string ,
searchServiceName:
{
Description: The name of the Azure AI Search service associated with the specified resource group. ,
Required: True ,
}
string ,
x-ms-client-request-id:
{
Description: A client-generated GUID value that identifies this request. If specified, this will be included in response information as a way to track the request. ,
Format: uuid ,
Required: False ,
}
string ,
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
subscriptionId:
{
Description: The unique identifier for a Microsoft Azure subscription. You can obtain this value from the Azure Resource Manager API or the portal. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}

⚐ Response (default)

{
error:
{
Description: Describes a particular API error with an error code and a message. ,
Required: False ,
}
{
code:
{
Description: An error code that describes the error condition more precisely than an HTTP status code. Can be used to programmatically handle specific error cases. ,
Required: False ,
}
string ,
message:
{
Description: A message that describes the error in detail and provides debugging information. ,
Required: False ,
}
string ,
target:
{
Description: The target of the particular error (for example, the name of the property in error). ,
Required: False ,
}
string ,
details:
{
Description: Contains nested errors that are related to this error. ,
Required: False ,
}
[
string ,
]
,
}
,
message:
{
Description: A brief description of the error that hints at what went wrong (for details/debugging information refer to the 'error.message' property). ,
Required: False ,
}
string ,
}
Services_ListByResourceGroup (updated)
Description :  Gets a list of all Search services in the given resource group.
Reference :  Link ¶

⚶ Changes

{
  "#id": "Services_ListByResourceGroup",
  "$responses": {
    "200": {
      "$properties": {
        "value": {
          "$properties": {
            "properties": [
              {
                "#name": "hostingMode",
                "Description": {
                  "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
                  "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
                },
                "Enum": {
                  "new": [
                    [
                      "Default",
                      "The limit on number of indexes is determined by the default limits for the SKU."
                    ],
                    [
                      "HighDensity",
                      "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                    ]
                  ],
                  "old": [
                    [
                      "default",
                      "The limit on number of indexes is determined by the default limits for the SKU."
                    ],
                    [
                      "highDensity",
                      "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                    ]
                  ]
                }
              },
              {
                "#name": "computeType",
                "Enum": {
                  "new": [
                    [
                      "Default",
                      "Create the service with the Default Compute."
                    ],
                    [
                      "Confidential",
                      "Create the service with Azure Confidential Compute."
                    ]
                  ],
                  "old": [
                    [
                      "default",
                      "Create the service with the Default Compute."
                    ],
                    [
                      "confidential",
                      "Create the service with Azure Confidential Compute."
                    ]
                  ]
                }
              },
              {
                "#name": "publicNetworkAccess",
                "Description": {
                  "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
                  "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
                },
                "Enum": {
                  "new": [
                    [
                      "Enabled",
                      "The search service is accessible from traffic originating from the public internet."
                    ],
                    [
                      "Disabled",
                      "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                    ]
                  ],
                  "old": [
                    [
                      "enabled",
                      "The search service is accessible from traffic originating from the public internet."
                    ],
                    [
                      "disabled",
                      "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                    ]
                  ]
                }
              }
            ]
          }
        }
      }
    }
  }
}

⚼ Request

GET:  /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Search/searchServices
{
resourceGroupName:
{
Description: The name of the resource group. The name is case insensitive. ,
Required: True ,
}
string ,
x-ms-client-request-id:
{
Description: A client-generated GUID value that identifies this request. If specified, this will be included in response information as a way to track the request. ,
Format: uuid ,
Required: False ,
}
string ,
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
subscriptionId:
{
Description: The unique identifier for a Microsoft Azure subscription. You can obtain this value from the Azure Resource Manager API or the portal. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
value:
{
Description: The list of search services. ,
Required: False ,
}
[
{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}
,
]
,
nextLink:
{
Description: Request URL that can be used to query next page of search services. Returned when the total number of requested search services exceed maximum page size. ,
Required: False ,
}
string ,
}

⚐ Response (default)

{
error:
{
Description: Describes a particular API error with an error code and a message. ,
Required: False ,
}
{
code:
{
Description: An error code that describes the error condition more precisely than an HTTP status code. Can be used to programmatically handle specific error cases. ,
Required: False ,
}
string ,
message:
{
Description: A message that describes the error in detail and provides debugging information. ,
Required: False ,
}
string ,
target:
{
Description: The target of the particular error (for example, the name of the property in error). ,
Required: False ,
}
string ,
details:
{
Description: Contains nested errors that are related to this error. ,
Required: False ,
}
[
string ,
]
,
}
,
message:
{
Description: A brief description of the error that hints at what went wrong (for details/debugging information refer to the 'error.message' property). ,
Required: False ,
}
string ,
}
Services_ListBySubscription (updated)
Description :  Gets a list of all Search services in the given subscription.
Reference :  Link ¶

⚶ Changes

{
  "#id": "Services_ListBySubscription",
  "$responses": {
    "200": {
      "$properties": {
        "value": {
          "$properties": {
            "properties": [
              {
                "#name": "hostingMode",
                "Description": {
                  "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
                  "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
                },
                "Enum": {
                  "new": [
                    [
                      "Default",
                      "The limit on number of indexes is determined by the default limits for the SKU."
                    ],
                    [
                      "HighDensity",
                      "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                    ]
                  ],
                  "old": [
                    [
                      "default",
                      "The limit on number of indexes is determined by the default limits for the SKU."
                    ],
                    [
                      "highDensity",
                      "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                    ]
                  ]
                }
              },
              {
                "#name": "computeType",
                "Enum": {
                  "new": [
                    [
                      "Default",
                      "Create the service with the Default Compute."
                    ],
                    [
                      "Confidential",
                      "Create the service with Azure Confidential Compute."
                    ]
                  ],
                  "old": [
                    [
                      "default",
                      "Create the service with the Default Compute."
                    ],
                    [
                      "confidential",
                      "Create the service with Azure Confidential Compute."
                    ]
                  ]
                }
              },
              {
                "#name": "publicNetworkAccess",
                "Description": {
                  "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
                  "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
                },
                "Enum": {
                  "new": [
                    [
                      "Enabled",
                      "The search service is accessible from traffic originating from the public internet."
                    ],
                    [
                      "Disabled",
                      "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                    ]
                  ],
                  "old": [
                    [
                      "enabled",
                      "The search service is accessible from traffic originating from the public internet."
                    ],
                    [
                      "disabled",
                      "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                    ]
                  ]
                }
              }
            ]
          }
        }
      }
    }
  }
}

⚼ Request

GET:  /subscriptions/{subscriptionId}/providers/Microsoft.Search/searchServices
{
x-ms-client-request-id:
{
Description: A client-generated GUID value that identifies this request. If specified, this will be included in response information as a way to track the request. ,
Format: uuid ,
Required: False ,
}
string ,
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
subscriptionId:
{
Description: The unique identifier for a Microsoft Azure subscription. You can obtain this value from the Azure Resource Manager API or the portal. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
value:
{
Description: The list of search services. ,
Required: False ,
}
[
{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}
,
]
,
nextLink:
{
Description: Request URL that can be used to query next page of search services. Returned when the total number of requested search services exceed maximum page size. ,
Required: False ,
}
string ,
}

⚐ Response (default)

{
error:
{
Description: Describes a particular API error with an error code and a message. ,
Required: False ,
}
{
code:
{
Description: An error code that describes the error condition more precisely than an HTTP status code. Can be used to programmatically handle specific error cases. ,
Required: False ,
}
string ,
message:
{
Description: A message that describes the error in detail and provides debugging information. ,
Required: False ,
}
string ,
target:
{
Description: The target of the particular error (for example, the name of the property in error). ,
Required: False ,
}
string ,
details:
{
Description: Contains nested errors that are related to this error. ,
Required: False ,
}
[
string ,
]
,
}
,
message:
{
Description: A brief description of the error that hints at what went wrong (for details/debugging information refer to the 'error.message' property). ,
Required: False ,
}
string ,
}
Services_Upgrade (updated)
Description :  Upgrades the Azure AI Search service to the latest version available.
Reference :  Link ¶

⚶ Changes

{
  "#id": "Services_Upgrade",
  "$responses": {
    "200": {
      "$properties": {
        "properties": [
          {
            "#name": "hostingMode",
            "Description": {
              "new": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'.",
              "old": "Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'default' or 'highDensity'. For all other SKUs, this value must be 'default'."
            },
            "Enum": {
              "new": [
                [
                  "Default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "HighDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ],
              "old": [
                [
                  "default",
                  "The limit on number of indexes is determined by the default limits for the SKU."
                ],
                [
                  "highDensity",
                  "Only application for standard3 SKU, where the search service can have up to 1000 indexes."
                ]
              ]
            }
          },
          {
            "#name": "computeType",
            "Enum": {
              "new": [
                [
                  "Default",
                  "Create the service with the Default Compute."
                ],
                [
                  "Confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ],
              "old": [
                [
                  "default",
                  "Create the service with the Default Compute."
                ],
                [
                  "confidential",
                  "Create the service with Azure Confidential Compute."
                ]
              ]
            }
          },
          {
            "#name": "publicNetworkAccess",
            "Description": {
              "new": "This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method.",
              "old": "This value can be set to 'enabled' to avoid breaking changes on existing customer resources and templates. If set to 'disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method."
            },
            "Enum": {
              "new": [
                [
                  "Enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "Disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ],
              "old": [
                [
                  "enabled",
                  "The search service is accessible from traffic originating from the public internet."
                ],
                [
                  "disabled",
                  "The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections."
                ]
              ]
            }
          }
        ]
      }
    }
  }
}

⚼ Request

POST:  /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Search/searchServices/{searchServiceName}/upgrade
{
resourceGroupName:
{
Description: The name of the resource group. The name is case insensitive. ,
Required: True ,
}
string ,
searchServiceName:
{
Description: The name of the Azure AI Search service associated with the specified resource group. ,
Required: True ,
}
string ,
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
subscriptionId:
{
Description: The unique identifier for a Microsoft Azure subscription. You can obtain this value from the Azure Resource Manager API or the portal. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
properties:
{
Description: Properties of the search service. ,
Required: False ,
}
{
replicaCount:
{
Description: The number of replicas in the search service. If specified, it must be a value between 1 and 12 inclusive for standard SKUs or between 1 and 3 inclusive for basic SKU. ,
Format: int32 ,
Required: False ,
}
integer ,
partitionCount:
{
Description: The number of partitions in the search service; if specified, it can be 1, 2, 3, 4, 6, or 12. Values greater than 1 are only valid for standard SKUs. For 'standard3' services with hostingMode set to 'highDensity', the allowed values are between 1 and 3. ,
Format: int32 ,
Required: False ,
}
integer ,
endpoint:
{
Description: The endpoint of the Azure AI Search service. ,
Format: uri ,
Required: False ,
}
string ,
hostingMode:
{
Description: Applicable only for the standard3 SKU. You can set this property to enable up to 3 high density partitions that allow up to 1000 indexes, which is much higher than the maximum indexes allowed for any other SKU. For the standard3 SKU, the value is either 'Default' or 'HighDensity'. For all other SKUs, this value must be 'Default'. ,
Enum:
{
Default: The limit on number of indexes is determined by the default limits for the SKU. ,
HighDensity: Only application for standard3 SKU, where the search service can have up to 1000 indexes. ,
}
,
Required: False ,
}
enum ,
computeType:
{
Description: Configure this property to support the search service using either the Default Compute or Azure Confidential Compute. ,
Enum:
{
Default: Create the service with the Default Compute. ,
Confidential: Create the service with Azure Confidential Compute. ,
}
,
Required: False ,
}
enum ,
publicNetworkAccess:
{
Description: This value can be set to 'Enabled' to avoid breaking changes on existing customer resources and templates. If set to 'Disabled', traffic over public interface is not allowed, and private endpoint connections would be the exclusive access method. ,
Enum:
{
Enabled: The search service is accessible from traffic originating from the public internet. ,
Disabled: The search service is not accessible from traffic originating from the public internet. Access is only permitted over approved private endpoint connections. ,
}
,
Required: False ,
}
enum ,
status:
{
Description: The status of the search service. Possible values include: 'running': The search service is running and no provisioning operations are underway. 'provisioning': The search service is being provisioned or scaled up or down. 'deleting': The search service is being deleted. 'degraded': The search service is degraded. This can occur when the underlying search units are not healthy. The search service is most likely operational, but performance might be slow and some requests might be dropped. 'disabled': The search service is disabled. In this state, the service will reject all API requests. 'error': The search service is in an error state. 'stopped': The search service is in a subscription that's disabled. If your service is in the degraded, disabled, or error states, it means the Azure AI Search team is actively investigating the underlying issue. Dedicated services in these states are still chargeable based on the number of search units provisioned. ,
Enum:
{
running: The search service is running and no provisioning operations are underway. ,
provisioning: The search service is being provisioned or scaled up or down. ,
deleting: The search service is being deleted. ,
degraded: The search service is degraded because underlying search units are not healthy. ,
disabled: The search service is disabled and all API requests will be rejected. ,
error: The search service is in error state, indicating either a failure to provision or to be deleted. ,
stopped: The search service is in a subscription that's disabled. ,
}
,
Required: False ,
}
enum ,
statusDetails:
{
Description: The details of the search service status. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The state of the last provisioning operation performed on the search service. Provisioning is an intermediate state that occurs while service capacity is being established. After capacity is set up, provisioningState changes to either 'Succeeded' or 'Failed'. Client applications can poll provisioning status (the recommended polling interval is from 30 seconds to one minute) by using the Get Search Service operation to see when an operation is completed. If you are using the free service, this value tends to come back as 'Succeeded' directly in the call to Create search service. This is because the free service uses capacity that is already set up. ,
Enum:
{
succeeded: The last provisioning operation has completed successfully. ,
provisioning: The search service is being provisioned or scaled up or down. ,
failed: The last provisioning operation has failed. ,
}
,
Required: False ,
}
enum ,
networkRuleSet:
{
Description: Network specific rules that determine how the Azure AI Search service may be reached. ,
Required: False ,
}
{
ipRules:
{
Description: A list of IP restriction rules that defines the inbound network(s) with allowing access to the search service endpoint. At the meantime, all other public IP networks are blocked by the firewall. These restriction rules are applied only when the 'publicNetworkAccess' of the search service is 'enabled'; otherwise, traffic over public interface is not allowed even with any public IP rules, and private endpoint connections would be the exclusive access method. ,
Required: False ,
}
[
{
value:
{
Description: Value corresponding to a single IPv4 address (eg., 123.1.2.3) or an IP range in CIDR format (eg., 123.1.2.3/24) to be allowed. ,
Required: False ,
}
string ,
}
,
]
,
bypass:
{
Description: Possible origins of inbound traffic that can bypass the rules defined in the 'ipRules' section. ,
Enum:
{
None: Indicates that no origin can bypass the rules defined in the 'ipRules' section. This is the default. ,
AzurePortal: Indicates that requests originating from the Azure portal can bypass the rules defined in the 'ipRules' section. ,
AzureServices: Indicates that requests originating from Azure trusted services can bypass the rules defined in the 'ipRules' section. ,
}
,
Required: False ,
}
enum ,
}
,
dataExfiltrationProtections:
{
Description: A list of data exfiltration scenarios that are explicitly disallowed for the search service. Currently, the only supported value is 'All' to disable all possible data export scenarios with more fine grained controls planned for the future. ,
Required: False ,
}
[
string ,
]
,
encryptionWithCmk:
{
Description: Specifies any policy regarding encryption of resources (such as indexes) using customer manager keys within a search service. ,
Required: False ,
}
{
enforcement:
{
Description: Describes how a search service should enforce compliance if it finds objects that aren't encrypted with the customer-managed key. ,
Enum:
{
Disabled: No enforcement of customer-managed key encryption will be made. Only the built-in service-managed encryption is used. ,
Enabled: Search service will be marked as non-compliant if one or more objects aren't encrypted with a customer-managed key. ,
Unspecified: Enforcement policy is not explicitly specified, with the behavior being the same as if it were set to 'Disabled'. ,
}
,
Required: False ,
}
enum ,
encryptionComplianceStatus:
{
Description: Returns the status of search service compliance with respect to non-CMK-encrypted objects. If a service has more than one unencrypted object, and enforcement is enabled, the service is marked as noncompliant. ,
Enum:
{
Compliant: Indicates that the search service is compliant, either because the number of non-CMK-encrypted objects is zero or enforcement is disabled. ,
NonCompliant: Indicates that the search service has more than one non-CMK-encrypted objects. ,
}
,
Required: False ,
}
enum ,
serviceLevelEncryptionKey:
{
Description: The encryption key used for service-level encryption. ,
Required: False ,
}
{
keyVaultKeyName:
{
Description: The name of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultKeyVersion:
{
Description: The version of your Azure Key Vault key to be used to encrypt your data at rest. ,
Required: False ,
}
string ,
keyVaultUri:
{
Description: The URI of your Azure Key Vault, also referred to as DNS name, that contains the key to be used to encrypt your data at rest. An example URI might be `https://my-keyvault-name.vault.azure.net`. ,
Required: False ,
}
string ,
accessCredentials:
{
Description: Optional Azure Active Directory credentials used for accessing your Azure Key Vault. Not required if using managed identity instead. ,
Required: False ,
}
{
applicationId:
{
Description: An AAD Application ID that was granted the required access permissions to the Azure Key Vault that is to be used when encrypting your data at rest. The Application ID should not be confused with the Object ID for your AAD Application. ,
Required: False ,
}
string ,
applicationSecret:
{
Description: The authentication key of the specified AAD application. ,
Required: False ,
}
string ,
}
,
identity:
{
Description: An explicit managed identity to use for this encryption key. If not specified and the access credentials property is null, the system-assigned managed identity is used. On update to the resource, if the explicit identity is unspecified, it remains unchanged. If "none" is specified, the value of this property is cleared. ,
Required: False ,
}
{
@odata.type:
{
Description: A URI fragment specifying the type of identity. ,
Required: True ,
}
string ,
}
,
}
,
}
,
disableLocalAuth:
{
Description: When set to true, calls to the search service will not be permitted to utilize API keys for authentication. This cannot be set to true if 'dataPlaneAuthOptions' are defined. ,
Required: False ,
}
boolean ,
authOptions:
{
Description: Defines the options for how the data plane API of a search service authenticates requests. This cannot be set if 'disableLocalAuth' is set to true. ,
Required: False ,
}
{
apiKeyOnly:
{
Description: Indicates that only the API key can be used for authentication. ,
Required: False ,
}
object ,
aadOrApiKey:
{
Description: Indicates that either the API key or an access token from a Microsoft Entra ID tenant can be used for authentication. ,
Required: False ,
}
{
aadAuthFailureMode:
{
Description: Describes what response the data plane API of a search service would send for requests that failed authentication. ,
Enum:
{
http403: Indicates that requests that failed authentication should be presented with an HTTP status code of 403 (Forbidden). ,
http401WithBearerChallenge: Indicates that requests that failed authentication should be presented with an HTTP status code of 401 (Unauthorized) and present a Bearer Challenge. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
semanticSearch:
{
Description: Sets options that control the availability of semantic search. This configuration is only possible for certain Azure AI Search SKUs in certain locations. ,
Enum:
{
disabled: Indicates that semantic reranker is disabled for the search service. This is the default. ,
free: Enables semantic reranker on a search service and indicates that it is to be used within the limits of the free plan. The free plan would cap the volume of semantic ranking requests and is offered at no extra charge. This is the default for newly provisioned search services. ,
standard: Enables semantic reranker on a search service as a billable feature, with higher throughput and volume of semantically reranked queries. ,
}
,
Required: False ,
}
enum ,
privateEndpointConnections:
{
Description: The list of private endpoint connections to the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of an existing private endpoint connection to the Azure AI Search service. ,
Required: False ,
}
{
privateEndpoint:
{
Description: The private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
{
id:
{
Description: The resource ID of the private endpoint resource from Microsoft.Network provider. ,
Required: False ,
}
string ,
}
,
privateLinkServiceConnectionState:
{
Description: Describes the current state of an existing Azure Private Link service connection to the private endpoint. ,
Required: False ,
}
{
status:
{
Description: Status of the the private link service connection. Valid values are Pending, Approved, Rejected, or Disconnected. ,
Enum:
{
Pending: The private endpoint connection has been created and is pending approval. ,
Approved: The private endpoint connection is approved and is ready for use. ,
Rejected: The private endpoint connection has been rejected and cannot be used. ,
Disconnected: The private endpoint connection has been removed from the service. ,
}
,
Required: False ,
}
enum ,
description:
{
Description: The description for the private link service connection state. ,
Required: False ,
}
string ,
actionsRequired:
{
Description: A description of any extra actions that may be required. ,
Required: False ,
}
string ,
}
,
groupId:
{
Description: The group ID of the Azure resource for which the private link service is for. ,
Required: False ,
}
string ,
provisioningState:
{
Description: The provisioning state of the private link service connection. Valid values are Updating, Deleting, Failed, Succeeded, Incomplete, or Canceled. ,
Enum:
{
Updating: The private link service connection is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The private link service connection is in the process of being deleted. ,
Failed: The private link service connection has failed to be provisioned or deleted. ,
Succeeded: The private link service connection has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the private link service connection resource has been accepted but the process of creation has not commenced yet. ,
Canceled: Provisioning request for the private link service connection resource has been canceled. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
sharedPrivateLinkResources:
{
Description: The list of shared private link resources managed by the Azure AI Search service. ,
Required: False ,
}
[
{
properties:
{
Description: Describes the properties of a shared private link resource managed by the Azure AI Search service. ,
Required: False ,
}
{
privateLinkResourceId:
{
Description: The resource ID of the resource the shared private link resource is for. ,
Required: False ,
}
string ,
groupId:
{
Description: The group ID from the provider of resource the shared private link resource is for. ,
Required: False ,
}
string ,
requestMessage:
{
Description: The message for requesting approval of the shared private link resource. ,
Required: False ,
}
string ,
resourceRegion:
{
Description: Optional. Can be used to specify the Azure Resource Manager location of the resource for which a shared private link is being created. This is only required for those resources whose DNS configuration are regional (such as Azure Kubernetes Service). ,
Required: False ,
}
string ,
status:
{
Description: Status of the shared private link resource. Valid values are Pending, Approved, Rejected or Disconnected. ,
Enum:
{
Pending: The shared private link resource has been created and is pending approval. ,
Approved: The shared private link resource is approved and is ready for use. ,
Rejected: The shared private link resource has been rejected and cannot be used. ,
Disconnected: The shared private link resource has been removed from the service. ,
}
,
Required: False ,
}
enum ,
provisioningState:
{
Description: The provisioning state of the shared private link resource. Valid values are Updating, Deleting, Failed, Succeeded or Incomplete. ,
Enum:
{
Updating: The shared private link resource is in the process of being created along with other resources for it to be fully functional. ,
Deleting: The shared private link resource is in the process of being deleted. ,
Failed: The shared private link resource has failed to be provisioned or deleted. ,
Succeeded: The shared private link resource has finished provisioning and is ready for approval. ,
Incomplete: Provisioning request for the shared private link resource has been accepted but the process of creation has not commenced yet. ,
}
,
Required: False ,
}
enum ,
}
,
}
,
]
,
eTag:
{
Description: A system generated property representing the service's etag that can be for optimistic concurrency control during updates. ,
Required: False ,
}
string ,
upgradeAvailable:
{
Description: Indicates if the search service has an upgrade available. ,
Enum:
{
notAvailable: An upgrade is currently not available for the service. ,
available: There is an upgrade available for the service. ,
}
,
Required: False ,
}
enum ,
serviceUpgradedAt:
{
Description: The date and time the search service was last upgraded. This field will be null until the service gets upgraded for the first time. ,
Format: date-time ,
Required: False ,
}
string ,
autoGeneratedDomainNameLabelScope:
{
Description: Indicates the endpoint domain name label reuse scope. The default value is TenantReuse. ,
Enum:
{
TenantReuse: Service with the same name in the same tenant will receive the same Domain Name Label. ,
SubscriptionReuse: Service with the same name in the same subscription will receive the same Domain Name Label. ,
ResourceGroupReuse: Service with the same name in the same Resource Group will receive the same Domain Name Label. ,
NoReuse: Service with the same name will receive a new Domain Name Label for each new instance. ,
}
,
Required: False ,
}
enum ,
}
,
sku:
{
Description: The SKU of the search service, which determines price tier and capacity limits. This property is required when creating a new search service. ,
Required: False ,
}
{
name:
{
Description: The SKU of the search service. Valid values include: 'free': Shared service. 'basic': Dedicated service with up to 3 replicas. 'standard': Dedicated service with up to 12 partitions and 12 replicas. 'standard2': Similar to standard, but with more capacity per search unit. 'standard3': The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). 'storage_optimized_l1': Supports 1TB per partition, up to 12 partitions. 'storage_optimized_l2': Supports 2TB per partition, up to 12 partitions.' ,
Enum:
{
free: Free tier, with no SLA guarantees and a subset of the features offered on billable tiers. ,
basic: Billable tier for a dedicated service having up to 3 replicas. ,
standard: Billable tier for a dedicated service having up to 12 partitions and 12 replicas. ,
standard2: Similar to 'standard', but with more capacity per search unit. ,
standard3: The largest Standard offering with up to 12 partitions and 12 replicas (or up to 3 partitions with more indexes if you also set the hostingMode property to 'highDensity'). ,
storage_optimized_l1: Billable tier for a dedicated service that supports 1TB per partition, up to 12 partitions. ,
storage_optimized_l2: Billable tier for a dedicated service that supports 2TB per partition, up to 12 partitions. ,
}
,
Required: False ,
}
enum ,
}
,
identity:
{
Description: The identity of the resource. ,
Required: False ,
}
{
principalId:
{
Description: The principal ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
tenantId:
{
Description: The tenant ID of the system-assigned identity of the search service. ,
Required: False ,
}
string ,
type:
{
Description: The type of identity used for the resource. The type 'SystemAssigned, UserAssigned' includes both an identity created by the system and a set of user assigned identities. The type 'None' will remove all identities from the service. ,
Enum:
{
None: Indicates that any identity associated with the search service needs to be removed. ,
SystemAssigned: Indicates that system-assigned identity for the search service will be enabled. ,
UserAssigned: Indicates that one or more user assigned identities will be assigned to the search service. ,
SystemAssigned, UserAssigned: Indicates that system-assigned identity for the search service will be enabled along with the assignment of one or more user assigned identities. ,
}
,
Required: True ,
}
enum ,
userAssignedIdentities:
{
Description: The list of user identities associated with the resource. The user identity dictionary key references will be ARM resource IDs in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'. ,
Required: False ,
}
object ,
}
,
systemData:
{
Description: Azure Resource Manager metadata of the search service containing createdBy and modifiedBy information. ,
Required: False ,
}
{
createdBy:
{
Description: The identity that created the resource. ,
Required: False ,
}
string ,
createdByType:
{
Description: The type of identity that created the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
createdAt:
{
Description: The timestamp of resource creation (UTC). ,
Format: date-time ,
Required: False ,
}
string ,
lastModifiedBy:
{
Description: The identity that last modified the resource. ,
Required: False ,
}
string ,
lastModifiedByType:
{
Description: The type of identity that last modified the resource. ,
Enum:
{
User: No description available. ,
Application: No description available. ,
ManagedIdentity: No description available. ,
Key: No description available. ,
}
,
Required: False ,
}
enum ,
lastModifiedAt:
{
Description: The timestamp of resource last modification (UTC) ,
Format: date-time ,
Required: False ,
}
string ,
}
,
}

⚐ Response (202)

{
location: string ,
}

⚐ Response (default)

{
error:
{
Description: Describes a particular API error with an error code and a message. ,
Required: False ,
}
{
code:
{
Description: An error code that describes the error condition more precisely than an HTTP status code. Can be used to programmatically handle specific error cases. ,
Required: False ,
}
string ,
message:
{
Description: A message that describes the error in detail and provides debugging information. ,
Required: False ,
}
string ,
target:
{
Description: The target of the particular error (for example, the name of the property in error). ,
Required: False ,
}
string ,
details:
{
Description: Contains nested errors that are related to this error. ,
Required: False ,
}
[
string ,
]
,
}
,
message:
{
Description: A brief description of the error that hints at what went wrong (for details/debugging information refer to the 'error.message' property). ,
Required: False ,
}
string ,
}