1+ {
2+ "id" : " https://schema.management.azure.com/schemas/2015-07-01/Microsoft.Authorization.Authz.json#" ,
3+ "$schema" : " http://json-schema.org/draft-04/schema#" ,
4+ "title" : " Microsoft.Authorization" ,
5+ "description" : " Microsoft Authorization Resource Types" ,
6+ "resourceDefinitions" : {},
7+ "unknown_resourceDefinitions" : {
8+ "roleAssignments" : {
9+ "type" : " object" ,
10+ "properties" : {
11+ "apiVersion" : {
12+ "type" : " string" ,
13+ "enum" : [
14+ " 2015-07-01"
15+ ]
16+ },
17+ "name" : {
18+ "type" : " string" ,
19+ "description" : " A GUID for the role assignment to create. The name must be unique and different for each role assignment."
20+ },
21+ "properties" : {
22+ "oneOf" : [
23+ {
24+ "$ref" : " #/definitions/RoleAssignmentProperties"
25+ },
26+ {
27+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
28+ }
29+ ],
30+ "description" : " Role assignment properties."
31+ },
32+ "type" : {
33+ "type" : " string" ,
34+ "enum" : [
35+ " Microsoft.Authorization/roleAssignments"
36+ ]
37+ }
38+ },
39+ "required" : [
40+ " apiVersion" ,
41+ " name" ,
42+ " properties" ,
43+ " type"
44+ ],
45+ "description" : " Microsoft.Authorization/roleAssignments"
46+ },
47+ "roleDefinitions" : {
48+ "type" : " object" ,
49+ "properties" : {
50+ "apiVersion" : {
51+ "type" : " string" ,
52+ "enum" : [
53+ " 2015-07-01"
54+ ]
55+ },
56+ "name" : {
57+ "type" : " string" ,
58+ "description" : " The ID of the role definition."
59+ },
60+ "properties" : {
61+ "oneOf" : [
62+ {
63+ "$ref" : " #/definitions/RoleDefinitionProperties"
64+ },
65+ {
66+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
67+ }
68+ ],
69+ "description" : " Role definition properties."
70+ },
71+ "type" : {
72+ "type" : " string" ,
73+ "enum" : [
74+ " Microsoft.Authorization/roleDefinitions"
75+ ]
76+ }
77+ },
78+ "required" : [
79+ " apiVersion" ,
80+ " name" ,
81+ " properties" ,
82+ " type"
83+ ],
84+ "description" : " Microsoft.Authorization/roleDefinitions"
85+ }
86+ },
87+ "definitions" : {
88+ "Permission" : {
89+ "type" : " object" ,
90+ "properties" : {
91+ "actions" : {
92+ "oneOf" : [
93+ {
94+ "type" : " array" ,
95+ "items" : {
96+ "type" : " string"
97+ }
98+ },
99+ {
100+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
101+ }
102+ ],
103+ "description" : " Allowed actions."
104+ },
105+ "notActions" : {
106+ "oneOf" : [
107+ {
108+ "type" : " array" ,
109+ "items" : {
110+ "type" : " string"
111+ }
112+ },
113+ {
114+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
115+ }
116+ ],
117+ "description" : " Denied actions."
118+ }
119+ },
120+ "description" : " Role definition permissions."
121+ },
122+ "RoleAssignmentProperties" : {
123+ "type" : " object" ,
124+ "properties" : {
125+ "principalId" : {
126+ "type" : " string" ,
127+ "description" : " The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group."
128+ },
129+ "roleDefinitionId" : {
130+ "type" : " string" ,
131+ "description" : " The role definition ID used in the role assignment."
132+ }
133+ },
134+ "required" : [
135+ " principalId" ,
136+ " roleDefinitionId"
137+ ],
138+ "description" : " Role assignment properties."
139+ },
140+ "RoleDefinitionProperties" : {
141+ "type" : " object" ,
142+ "properties" : {
143+ "assignableScopes" : {
144+ "oneOf" : [
145+ {
146+ "type" : " array" ,
147+ "items" : {
148+ "type" : " string"
149+ }
150+ },
151+ {
152+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
153+ }
154+ ],
155+ "description" : " Role definition assignable scopes."
156+ },
157+ "description" : {
158+ "type" : " string" ,
159+ "description" : " The role definition description."
160+ },
161+ "permissions" : {
162+ "oneOf" : [
163+ {
164+ "type" : " array" ,
165+ "items" : {
166+ "$ref" : " #/definitions/Permission"
167+ }
168+ },
169+ {
170+ "$ref" : " https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
171+ }
172+ ],
173+ "description" : " Role definition permissions."
174+ },
175+ "roleName" : {
176+ "type" : " string" ,
177+ "description" : " The role name."
178+ },
179+ "type" : {
180+ "type" : " string" ,
181+ "description" : " The role type."
182+ }
183+ },
184+ "description" : " Role definition properties."
185+ }
186+ }
187+ }
0 commit comments