authorization.azure.com/v1api20220401

Package v1api20220401 contains API Schema definitions for the authorization v1api20220401 API group

Resource Types:

APIVersion (`string` alias)

Value	Description
"2022-04-01"

Permission

(Appears on:RoleDefinition_Spec)

Role definition permissions.

Field	Description
`actions` []string	Actions: Allowed actions.
`dataActions` []string	DataActions: Allowed Data actions.
`notActions` []string	NotActions: Denied actions.
`notDataActions` []string	NotDataActions: Denied Data actions.

Permission_ARM

(Appears on:RoleDefinitionProperties_ARM)

Role definition permissions.

Field	Description
`actions` []string	Actions: Allowed actions.
`dataActions` []string	DataActions: Allowed Data actions.
`notActions` []string	NotActions: Denied actions.
`notDataActions` []string	NotDataActions: Denied Data actions.

Permission_STATUS

(Appears on:RoleDefinition_STATUS)

Role definition permissions.

Field	Description
`actions` []string	Actions: Allowed actions.
`dataActions` []string	DataActions: Allowed Data actions.
`notActions` []string	NotActions: Denied actions.
`notDataActions` []string	NotDataActions: Denied Data actions.

Permission_STATUS_ARM

(Appears on:RoleDefinitionProperties_STATUS_ARM)

Role definition permissions.

Field	Description
`actions` []string	Actions: Allowed actions.
`dataActions` []string	DataActions: Allowed Data actions.
`notActions` []string	NotActions: Denied actions.
`notDataActions` []string	NotDataActions: Denied Data actions.

RoleAssignment

Generator information: - Generated from: /authorization/resource-manager/Microsoft.Authorization/stable/2022-04-01/authorization-RoleAssignmentsCalls.json - ARM URI: /{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}

Field Description

metadata
Kubernetes meta/v1.ObjectMeta Refer to the Kubernetes API documentation for the fields of the metadata field.

spec
RoleAssignment_Spec

`azureName` string	AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.
`condition` string	Condition: The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase ‘foo_storage_container’
`conditionVersion` string	ConditionVersion: Version of the condition. Currently the only accepted value is ‘2.0’
`delegatedManagedIdentityResourceId` string	DelegatedManagedIdentityResourceId: Id of the delegated managed identity resource
`description` string	Description: Description of role assignment
`owner` genruntime.ArbitraryOwnerReference	Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. This resource is an extension resource, which means that any other Azure resource can be its owner.
`principalId` string	PrincipalId: The principal ID.
`principalIdFromConfig` genruntime.ConfigMapReference	PrincipalIdFromConfig: The principal ID.
`principalType` RoleAssignmentProperties_PrincipalType	PrincipalType: The principal type of the assigned principal ID.
`roleDefinitionReference` genruntime.ResourceReference	RoleDefinitionReference: The role definition ID.

status
RoleAssignment_STATUS

RoleAssignmentProperties_ARM

(Appears on:RoleAssignment_Spec_ARM)

Role assignment properties.

Field	Description
`condition` string	Condition: The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase ‘foo_storage_container’
`conditionVersion` string	ConditionVersion: Version of the condition. Currently the only accepted value is ‘2.0’
`delegatedManagedIdentityResourceId` string	DelegatedManagedIdentityResourceId: Id of the delegated managed identity resource
`description` string	Description: Description of role assignment
`principalId` string	PrincipalId: The principal ID.
`principalType` RoleAssignmentProperties_PrincipalType	PrincipalType: The principal type of the assigned principal ID.
`roleDefinitionId` string

RoleAssignmentProperties_PrincipalType (`string` alias)

(Appears on:RoleAssignmentProperties_ARM, RoleAssignment_Spec)

Value	Description
"Device"
"ForeignGroup"
"Group"
"ServicePrincipal"
"User"

RoleAssignmentProperties_PrincipalType_STATUS (`string` alias)

(Appears on:RoleAssignmentProperties_STATUS_ARM, RoleAssignment_STATUS)

Value	Description
"Device"
"ForeignGroup"
"Group"
"ServicePrincipal"
"User"

RoleAssignmentProperties_STATUS_ARM

(Appears on:RoleAssignment_STATUS_ARM)

Role assignment properties.

Field	Description
`condition` string	Condition: The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase ‘foo_storage_container’
`conditionVersion` string	ConditionVersion: Version of the condition. Currently the only accepted value is ‘2.0’
`createdBy` string	CreatedBy: Id of the user who created the assignment
`createdOn` string	CreatedOn: Time it was created
`delegatedManagedIdentityResourceId` string	DelegatedManagedIdentityResourceId: Id of the delegated managed identity resource
`description` string	Description: Description of role assignment
`principalId` string	PrincipalId: The principal ID.
`principalType` RoleAssignmentProperties_PrincipalType_STATUS	PrincipalType: The principal type of the assigned principal ID.
`roleDefinitionId` string	RoleDefinitionId: The role definition ID.
`scope` string	Scope: The role assignment scope.
`updatedBy` string	UpdatedBy: Id of the user who updated the assignment
`updatedOn` string	UpdatedOn: Time it was updated

RoleAssignment_STATUS

(Appears on:RoleAssignment)

Role Assignments

Field	Description
`condition` string	Condition: The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase ‘foo_storage_container’
`conditionVersion` string	ConditionVersion: Version of the condition. Currently the only accepted value is ‘2.0’
`conditions` []genruntime/conditions.Condition	Conditions: The observed state of the resource
`createdBy` string	CreatedBy: Id of the user who created the assignment
`createdOn` string	CreatedOn: Time it was created
`delegatedManagedIdentityResourceId` string	DelegatedManagedIdentityResourceId: Id of the delegated managed identity resource
`description` string	Description: Description of role assignment
`id` string	Id: The role assignment ID.
`name` string	Name: The role assignment name.
`principalId` string	PrincipalId: The principal ID.
`principalType` RoleAssignmentProperties_PrincipalType_STATUS	PrincipalType: The principal type of the assigned principal ID.
`roleDefinitionId` string	RoleDefinitionId: The role definition ID.
`scope` string	Scope: The role assignment scope.
`type` string	Type: The role assignment type.
`updatedBy` string	UpdatedBy: Id of the user who updated the assignment
`updatedOn` string	UpdatedOn: Time it was updated

RoleAssignment_STATUS_ARM

Role Assignments

Field	Description
`id` string	Id: The role assignment ID.
`name` string	Name: The role assignment name.
`properties` RoleAssignmentProperties_STATUS_ARM	Properties: Role assignment properties.
`type` string	Type: The role assignment type.

RoleAssignment_Spec

(Appears on:RoleAssignment)

Field	Description
`azureName` string	AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.
`condition` string	Condition: The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase ‘foo_storage_container’
`conditionVersion` string	ConditionVersion: Version of the condition. Currently the only accepted value is ‘2.0’
`delegatedManagedIdentityResourceId` string	DelegatedManagedIdentityResourceId: Id of the delegated managed identity resource
`description` string	Description: Description of role assignment
`owner` genruntime.ArbitraryOwnerReference	Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. This resource is an extension resource, which means that any other Azure resource can be its owner.
`principalId` string	PrincipalId: The principal ID.
`principalIdFromConfig` genruntime.ConfigMapReference	PrincipalIdFromConfig: The principal ID.
`principalType` RoleAssignmentProperties_PrincipalType	PrincipalType: The principal type of the assigned principal ID.
`roleDefinitionReference` genruntime.ResourceReference	RoleDefinitionReference: The role definition ID.

RoleAssignment_Spec_ARM

Field	Description
`name` string
`properties` RoleAssignmentProperties_ARM	Properties: Role assignment properties.

RoleDefinition

Generator information: - Generated from: /authorization/resource-manager/Microsoft.Authorization/stable/2022-04-01/authorization-RoleDefinitionsCalls.json - ARM URI: /{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionId}

Field Description

metadata
Kubernetes meta/v1.ObjectMeta Refer to the Kubernetes API documentation for the fields of the metadata field.

spec
RoleDefinition_Spec

`assignableScopesReferences` []genruntime.ResourceReference	AssignableScopesReferences: Role definition assignable scopes.
`azureName` string	AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.
`description` string	Description: The role definition description.
`owner` genruntime.ArbitraryOwnerReference	Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. This resource is an extension resource, which means that any other Azure resource can be its owner.
`permissions` []Permission	Permissions: Role definition permissions.
`roleName` string	RoleName: The role name.
`type` string	Type: The role type.

status
RoleDefinition_STATUS

RoleDefinitionProperties_ARM

(Appears on:RoleDefinition_Spec_ARM)

Role definition properties.

Field	Description
`assignableScopes` []string
`description` string	Description: The role definition description.
`permissions` []Permission_ARM	Permissions: Role definition permissions.
`roleName` string	RoleName: The role name.
`type` string	Type: The role type.

RoleDefinitionProperties_STATUS_ARM

(Appears on:RoleDefinition_STATUS_ARM)

Role definition properties.

Field	Description
`assignableScopes` []string	AssignableScopes: Role definition assignable scopes.
`createdBy` string	CreatedBy: Id of the user who created the assignment
`createdOn` string	CreatedOn: Time it was created
`description` string	Description: The role definition description.
`permissions` []Permission_STATUS_ARM	Permissions: Role definition permissions.
`roleName` string	RoleName: The role name.
`type` string	Type: The role type.
`updatedBy` string	UpdatedBy: Id of the user who updated the assignment
`updatedOn` string	UpdatedOn: Time it was updated

RoleDefinition_STATUS

(Appears on:RoleDefinition)

Role definition.

Field	Description
`assignableScopes` []string	AssignableScopes: Role definition assignable scopes.
`conditions` []genruntime/conditions.Condition	Conditions: The observed state of the resource
`createdBy` string	CreatedBy: Id of the user who created the assignment
`createdOn` string	CreatedOn: Time it was created
`description` string	Description: The role definition description.
`id` string	Id: The role definition ID.
`name` string	Name: The role definition name.
`permissions` []Permission_STATUS	Permissions: Role definition permissions.
`properties_type` string	PropertiesType: The role type.
`roleName` string	RoleName: The role name.
`type` string	Type: The role definition type.
`updatedBy` string	UpdatedBy: Id of the user who updated the assignment
`updatedOn` string	UpdatedOn: Time it was updated

RoleDefinition_STATUS_ARM

Role definition.

Field	Description
`id` string	Id: The role definition ID.
`name` string	Name: The role definition name.
`properties` RoleDefinitionProperties_STATUS_ARM	Properties: Role definition properties.
`type` string	Type: The role definition type.

RoleDefinition_Spec

(Appears on:RoleDefinition)

Field	Description
`assignableScopesReferences` []genruntime.ResourceReference	AssignableScopesReferences: Role definition assignable scopes.
`azureName` string	AzureName: The name of the resource in Azure. This is often the same as the name of the resource in Kubernetes but it doesn’t have to be.
`description` string	Description: The role definition description.
`owner` genruntime.ArbitraryOwnerReference	Owner: The owner of the resource. The owner controls where the resource goes when it is deployed. The owner also controls the resources lifecycle. When the owner is deleted the resource will also be deleted. This resource is an extension resource, which means that any other Azure resource can be its owner.
`permissions` []Permission	Permissions: Role definition permissions.
`roleName` string	RoleName: The role name.
`type` string	Type: The role type.

RoleDefinition_Spec_ARM

Field	Description
`name` string
`properties` RoleDefinitionProperties_ARM	Properties: Role definition properties.

authorization.azure.com/v1api20220401