Skip to content

Commit 191fedb

Browse files
committed
add authorization schemas back
1 parent cbb9363 commit 191fedb

File tree

6 files changed

+1934
-0
lines changed

6 files changed

+1934
-0
lines changed
Lines changed: 180 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,180 @@
1+
{
2+
"id": "https://schema.management.azure.com/schemas/2017-09-01/Microsoft.Authorization.json#",
3+
"$schema": "http://json-schema.org/draft-04/schema#",
4+
"title": "Microsoft.Authorization",
5+
"description": "Microsoft Authorization Resource Types",
6+
"resourceDefinitions": {
7+
"roleAssignments": {
8+
"type": "object",
9+
"properties": {
10+
"name": {
11+
"type": "string"
12+
},
13+
"type": {
14+
"type": "string",
15+
"enum": [
16+
"Microsoft.Authorization/roleAssignments"
17+
]
18+
},
19+
"apiVersion": {
20+
"type": "string",
21+
"enum": [
22+
"2017-09-01"
23+
]
24+
},
25+
"properties": {
26+
"oneOf": [
27+
{
28+
"$ref": "#/definitions/RoleAssignmentProperties"
29+
},
30+
{
31+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
32+
}
33+
],
34+
"description": "Role assignment properties."
35+
}
36+
},
37+
"required": [
38+
"name",
39+
"type",
40+
"apiVersion",
41+
"properties"
42+
],
43+
"description": "Microsoft.Authorization/roleAssignments"
44+
},
45+
"roleDefinitions": {
46+
"type": "object",
47+
"properties": {
48+
"name": {
49+
"type": "string"
50+
},
51+
"type": {
52+
"type": "string",
53+
"enum": [
54+
"Microsoft.Authorization/roleDefinitions"
55+
]
56+
},
57+
"apiVersion": {
58+
"type": "string",
59+
"enum": [
60+
"2017-09-01"
61+
]
62+
},
63+
"properties": {
64+
"oneOf": [
65+
{
66+
"$ref": "#/definitions/RoleDefinitionProperties"
67+
},
68+
{
69+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
70+
}
71+
],
72+
"description": "Role definition properties."
73+
}
74+
},
75+
"required": [
76+
"name",
77+
"type",
78+
"apiVersion",
79+
"properties"
80+
],
81+
"description": "Microsoft.Authorization/roleDefinitions"
82+
}
83+
},
84+
"definitions": {
85+
"Permission": {
86+
"type": "object",
87+
"properties": {
88+
"actions": {
89+
"oneOf": [
90+
{
91+
"type": "array",
92+
"items": {
93+
"type": "string"
94+
}
95+
},
96+
{
97+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
98+
}
99+
],
100+
"description": "Allowed actions."
101+
},
102+
"notActions": {
103+
"oneOf": [
104+
{
105+
"type": "array",
106+
"items": {
107+
"type": "string"
108+
}
109+
},
110+
{
111+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
112+
}
113+
],
114+
"description": "Denied actions."
115+
}
116+
},
117+
"description": "Role definition permissions."
118+
},
119+
"RoleAssignmentProperties": {
120+
"type": "object",
121+
"properties": {
122+
"roleDefinitionId": {
123+
"type": "string",
124+
"description": "The role definition ID used in the role assignment."
125+
},
126+
"principalId": {
127+
"type": "string",
128+
"description": "The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group."
129+
}
130+
},
131+
"description": "Role assignment properties."
132+
},
133+
"RoleDefinitionProperties": {
134+
"type": "object",
135+
"properties": {
136+
"roleName": {
137+
"type": "string",
138+
"description": "The role name."
139+
},
140+
"description": {
141+
"type": "string",
142+
"description": "The role definition description."
143+
},
144+
"type": {
145+
"type": "string",
146+
"description": "The role type."
147+
},
148+
"permissions": {
149+
"oneOf": [
150+
{
151+
"type": "array",
152+
"items": {
153+
"$ref": "#/definitions/Permission"
154+
}
155+
},
156+
{
157+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
158+
}
159+
],
160+
"description": "Role definition permissions."
161+
},
162+
"assignableScopes": {
163+
"oneOf": [
164+
{
165+
"type": "array",
166+
"items": {
167+
"type": "string"
168+
}
169+
},
170+
{
171+
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
172+
}
173+
],
174+
"description": "Role definition assignable scopes."
175+
}
176+
},
177+
"description": "Role definition properties."
178+
}
179+
}
180+
}

0 commit comments

Comments
 (0)