Microsoft.Authorization (preview:7.6.2)

2025/02/04 • 8 new methods

RoleAssignments_ListForScope (new)
Description :  Gets role assignments for a scope.
Reference :  Link ¶

⚼ Request

GET:  /{scope}/providers/Microsoft.Authorization/roleAssignments
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role assignments. ,
Required: True ,
}
string ,
$filter:
{
Description: The filter to apply on the operation. Use $filter=atScope() to return all role assignments at or above the scope. Use $filter=principalId eq {id} to return all role assignments at, above or below the scope for the specified principal. ,
Required: False ,
}
string ,
}

⚐ Response (200)

{
value:
{
Description: Role assignment list. ,
Required: False ,
}
[
{
id:
{
Description: The role assignment ID. ,
Required: False ,
}
string ,
name:
{
Description: The role assignment name. ,
Required: False ,
}
string ,
type:
{
Description: The role assignment type. ,
Required: False ,
}
string ,
properties:
{
Description: Role assignment properties. ,
Required: False ,
}
{
scope:
{
Description: The role scope. ,
Enum:
{
/: Global scope ,
/keys: Keys scope ,
}
,
Required: False ,
}
enum ,
roleDefinitionId:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
principalId:
{
Description: The principal ID. ,
Required: False ,
}
string ,
}
,
}
,
]
,
nextLink:
{
Description: The URL to use for getting the next set of results. ,
Required: False ,
}
string ,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}
RoleAssignments_Get (new)
Description :  Get the specified role assignment.
Reference :  Link ¶

⚼ Request

GET:  /{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role assignment. ,
Required: True ,
}
string ,
roleAssignmentName:
{
Description: The name of the role assignment to get. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
id:
{
Description: The role assignment ID. ,
Required: False ,
}
string ,
name:
{
Description: The role assignment name. ,
Required: False ,
}
string ,
type:
{
Description: The role assignment type. ,
Required: False ,
}
string ,
properties:
{
Description: Role assignment properties. ,
Required: False ,
}
{
scope:
{
Description: The role scope. ,
Enum:
{
/: Global scope ,
/keys: Keys scope ,
}
,
Required: False ,
}
enum ,
roleDefinitionId:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
principalId:
{
Description: The principal ID. ,
Required: False ,
}
string ,
}
,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}
RoleAssignments_Create (new)
Description :  Creates a role assignment.
Reference :  Link ¶

⚼ Request

PUT:  /{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role assignment to create. ,
Required: True ,
}
string ,
roleAssignmentName:
{
Description: The name of the role assignment to create. It can be any valid GUID. ,
Required: True ,
}
string ,
parameters:
{
Description: Parameters for the role assignment. ,
Required: True ,
}
{
properties:
{
Description: Role assignment properties. ,
Required: True ,
}
{
roleDefinitionId:
{
Description: The role definition ID used in the role assignment. ,
Required: True ,
}
string ,
principalId:
{
Description: The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group. ,
Required: True ,
}
string ,
}
,
}
,
}

⚐ Response (201)

{
id:
{
Description: The role assignment ID. ,
Required: False ,
}
string ,
name:
{
Description: The role assignment name. ,
Required: False ,
}
string ,
type:
{
Description: The role assignment type. ,
Required: False ,
}
string ,
properties:
{
Description: Role assignment properties. ,
Required: False ,
}
{
scope:
{
Description: The role scope. ,
Enum:
{
/: Global scope ,
/keys: Keys scope ,
}
,
Required: False ,
}
enum ,
roleDefinitionId:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
principalId:
{
Description: The principal ID. ,
Required: False ,
}
string ,
}
,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}
RoleAssignments_Delete (new)
Description :  Deletes a role assignment.
Reference :  Link ¶

⚼ Request

DELETE:  /{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role assignment to delete. ,
Required: True ,
}
string ,
roleAssignmentName:
{
Description: The name of the role assignment to delete. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
id:
{
Description: The role assignment ID. ,
Required: False ,
}
string ,
name:
{
Description: The role assignment name. ,
Required: False ,
}
string ,
type:
{
Description: The role assignment type. ,
Required: False ,
}
string ,
properties:
{
Description: Role assignment properties. ,
Required: False ,
}
{
scope:
{
Description: The role scope. ,
Enum:
{
/: Global scope ,
/keys: Keys scope ,
}
,
Required: False ,
}
enum ,
roleDefinitionId:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
principalId:
{
Description: The principal ID. ,
Required: False ,
}
string ,
}
,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}
RoleDefinitions_List (new)
Description :  Get all role definitions that are applicable at scope and above.
Reference :  Link ¶

⚼ Request

GET:  /{scope}/providers/Microsoft.Authorization/roleDefinitions
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role definition. ,
Required: True ,
}
string ,
$filter:
{
Description: The filter to apply on the operation. Use atScopeAndBelow filter to search below the given scope as well. ,
Required: False ,
}
string ,
}

⚐ Response (200)

{
value:
{
Description: Role definition list. ,
Required: False ,
}
[
{
id:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
name:
{
Description: The role definition name. ,
Required: False ,
}
string ,
type:
{
Description: The role definition type. ,
Enum:
{
Microsoft.Authorization/roleDefinitions: Microsoft-defined role definitions. ,
}
,
Required: False ,
}
enum ,
properties:
{
Description: Role definition properties. ,
Required: False ,
}
{
roleName:
{
Description: The role name. ,
Required: False ,
}
string ,
description:
{
Description: The role definition description. ,
Required: False ,
}
string ,
type:
{
Description: The role type. ,
Enum:
{
AKVBuiltInRole: Built in role. ,
CustomRole: Custom role. ,
}
,
Required: False ,
}
enum ,
permissions:
{
Description: Role definition permissions. ,
Required: False ,
}
[
{
actions:
{
Description: Action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notActions:
{
Description: Action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
dataActions:
{
Description: Data action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notDataActions:
{
Description: Data action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
}
,
]
,
assignableScopes:
{
Description: Role definition assignable scopes. ,
Required: False ,
}
[
string ,
]
,
}
,
}
,
]
,
nextLink:
{
Description: The URL to use for getting the next set of results. ,
Required: False ,
}
string ,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}
RoleDefinitions_Get (new)
Description :  Get the specified role definition.
Reference :  Link ¶

⚼ Request

GET:  /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionName}
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role definition to get. Managed HSM only supports '/'. ,
Required: True ,
}
string ,
roleDefinitionName:
{
Description: The name of the role definition to get. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
id:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
name:
{
Description: The role definition name. ,
Required: False ,
}
string ,
type:
{
Description: The role definition type. ,
Enum:
{
Microsoft.Authorization/roleDefinitions: Microsoft-defined role definitions. ,
}
,
Required: False ,
}
enum ,
properties:
{
Description: Role definition properties. ,
Required: False ,
}
{
roleName:
{
Description: The role name. ,
Required: False ,
}
string ,
description:
{
Description: The role definition description. ,
Required: False ,
}
string ,
type:
{
Description: The role type. ,
Enum:
{
AKVBuiltInRole: Built in role. ,
CustomRole: Custom role. ,
}
,
Required: False ,
}
enum ,
permissions:
{
Description: Role definition permissions. ,
Required: False ,
}
[
{
actions:
{
Description: Action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notActions:
{
Description: Action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
dataActions:
{
Description: Data action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notDataActions:
{
Description: Data action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
}
,
]
,
assignableScopes:
{
Description: Role definition assignable scopes. ,
Required: False ,
}
[
string ,
]
,
}
,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}
RoleDefinitions_CreateOrUpdate (new)
Description :  Creates or updates a custom role definition.
Reference :  Link ¶

⚼ Request

PUT:  /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionName}
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role definition to create or update. Managed HSM only supports '/'. ,
Required: True ,
}
string ,
roleDefinitionName:
{
Description: The name of the role definition to create or update. It can be any valid GUID. ,
Required: True ,
}
string ,
parameters:
{
Description: Parameters for the role definition. ,
Required: True ,
}
{
properties:
{
Description: Role definition properties. ,
Required: True ,
}
{
roleName:
{
Description: The role name. ,
Required: False ,
}
string ,
description:
{
Description: The role definition description. ,
Required: False ,
}
string ,
type:
{
Description: The role type. ,
Enum:
{
AKVBuiltInRole: Built in role. ,
CustomRole: Custom role. ,
}
,
Required: False ,
}
enum ,
permissions:
{
Description: Role definition permissions. ,
Required: False ,
}
[
{
actions:
{
Description: Action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notActions:
{
Description: Action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
dataActions:
{
Description: Data action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notDataActions:
{
Description: Data action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
}
,
]
,
assignableScopes:
{
Description: Role definition assignable scopes. ,
Required: False ,
}
[
string ,
]
,
}
,
}
,
}

⚐ Response (201)

{
id:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
name:
{
Description: The role definition name. ,
Required: False ,
}
string ,
type:
{
Description: The role definition type. ,
Enum:
{
Microsoft.Authorization/roleDefinitions: Microsoft-defined role definitions. ,
}
,
Required: False ,
}
enum ,
properties:
{
Description: Role definition properties. ,
Required: False ,
}
{
roleName:
{
Description: The role name. ,
Required: False ,
}
string ,
description:
{
Description: The role definition description. ,
Required: False ,
}
string ,
type:
{
Description: The role type. ,
Enum:
{
AKVBuiltInRole: Built in role. ,
CustomRole: Custom role. ,
}
,
Required: False ,
}
enum ,
permissions:
{
Description: Role definition permissions. ,
Required: False ,
}
[
{
actions:
{
Description: Action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notActions:
{
Description: Action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
dataActions:
{
Description: Data action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notDataActions:
{
Description: Data action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
}
,
]
,
assignableScopes:
{
Description: Role definition assignable scopes. ,
Required: False ,
}
[
string ,
]
,
}
,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}
RoleDefinitions_Delete (new)
Description :  Deletes a custom role definition.
Reference :  Link ¶

⚼ Request

DELETE:  /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionName}
{
api-version:
{
Description: The API version to use for this operation. ,
Required: True ,
}
string ,
scope:
{
Description: The scope of the role definition to delete. Managed HSM only supports '/'. ,
Required: True ,
}
string ,
roleDefinitionName:
{
Description: The name (GUID) of the role definition to delete. ,
Required: True ,
}
string ,
}

⚐ Response (200)

{
id:
{
Description: The role definition ID. ,
Required: False ,
}
string ,
name:
{
Description: The role definition name. ,
Required: False ,
}
string ,
type:
{
Description: The role definition type. ,
Enum:
{
Microsoft.Authorization/roleDefinitions: Microsoft-defined role definitions. ,
}
,
Required: False ,
}
enum ,
properties:
{
Description: Role definition properties. ,
Required: False ,
}
{
roleName:
{
Description: The role name. ,
Required: False ,
}
string ,
description:
{
Description: The role definition description. ,
Required: False ,
}
string ,
type:
{
Description: The role type. ,
Enum:
{
AKVBuiltInRole: Built in role. ,
CustomRole: Custom role. ,
}
,
Required: False ,
}
enum ,
permissions:
{
Description: Role definition permissions. ,
Required: False ,
}
[
{
actions:
{
Description: Action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notActions:
{
Description: Action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
dataActions:
{
Description: Data action permissions that are granted. ,
Required: False ,
}
[
string ,
]
,
notDataActions:
{
Description: Data action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal. ,
Required: False ,
}
[
string ,
]
,
}
,
]
,
assignableScopes:
{
Description: Role definition assignable scopes. ,
Required: False ,
}
[
string ,
]
,
}
,
}

⚐ Response (default)

{
error:
{
Description: The key vault server error. ,
Required: False ,
}
{
code:
{
Description: The error code. ,
Required: False ,
}
string ,
message:
{
Description: The error message. ,
Required: False ,
}
string ,
innererror:
{
Required: False ,
}
string ,
}
,
}