1. Packages
  2. Azure Native
  3. API Docs
  4. blueprint
  5. Assignment
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.29.0 published on Friday, Feb 16, 2024 by Pulumi

azure-native.blueprint.Assignment

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.29.0 published on Friday, Feb 16, 2024 by Pulumi

    Represents a blueprint assignment. Azure REST API version: 2018-11-01-preview. Prior API version in Azure Native 1.x: 2018-11-01-preview.

    Other available API versions: 2017-11-11-preview.

    Example Usage

    Assignment with system-assigned managed identity at management group scope

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AzureNative = Pulumi.AzureNative;
    
    return await Deployment.RunAsync(() => 
    {
        var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
        {
            AssignmentName = "assignSimpleBlueprint",
            BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
            Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
            Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
            {
                Type = "SystemAssigned",
            },
            Location = "eastus",
            Parameters = 
            {
                { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Contoso/Online/Shopping/Production",
                } },
                { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = new[]
                    {
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com",
                    },
                } },
                { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Standard_LRS",
                } },
            },
            ResourceGroups = 
            {
                { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
                {
                    Location = "eastus",
                    Name = "defaultRG",
                } },
            },
            ResourceScope = "managementGroups/ContosoOnlineGroup",
            Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-azure-native-sdk/blueprint/v2"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
    			AssignmentName: pulumi.String("assignSimpleBlueprint"),
    			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
    			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
    			Identity: &blueprint.ManagedServiceIdentityArgs{
    				Type: pulumi.String("SystemAssigned"),
    			},
    			Location: pulumi.String("eastus"),
    			Parameters: blueprint.ParameterValueMap{
    				"costCenter": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
    				},
    				"owners": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any{
    						"johnDoe@contoso.com",
    						"johnsteam@contoso.com",
    					},
    				},
    				"storageAccountType": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Standard_LRS"),
    				},
    			},
    			ResourceGroups: blueprint.ResourceGroupValueMap{
    				"storageRG": &blueprint.ResourceGroupValueArgs{
    					Location: pulumi.String("eastus"),
    					Name:     pulumi.String("defaultRG"),
    				},
    			},
    			ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
    			Scope:         pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azurenative.blueprint.Assignment;
    import com.pulumi.azurenative.blueprint.AssignmentArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var assignment = new Assignment("assignment", AssignmentArgs.builder()        
                .assignmentName("assignSimpleBlueprint")
                .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
                .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
                .identity(Map.of("type", "SystemAssigned"))
                .location("eastus")
                .parameters(Map.ofEntries(
                    Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                    Map.entry("owners", Map.of("value",                 
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com")),
                    Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
                ))
                .resourceGroups(Map.of("storageRG", Map.ofEntries(
                    Map.entry("location", "eastus"),
                    Map.entry("name", "defaultRG")
                )))
                .resourceScope("managementGroups/ContosoOnlineGroup")
                .scope("subscriptions/00000000-0000-0000-0000-000000000000")
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_azure_native as azure_native
    
    assignment = azure_native.blueprint.Assignment("assignment",
        assignment_name="assignSimpleBlueprint",
        blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity=azure_native.blueprint.ManagedServiceIdentityArgs(
            type="SystemAssigned",
        ),
        location="eastus",
        parameters={
            "costCenter": azure_native.blueprint.ParameterValueArgs(
                value="Contoso/Online/Shopping/Production",
            ),
            "owners": azure_native.blueprint.ParameterValueArgs(
                value=[
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            ),
            "storageAccountType": azure_native.blueprint.ParameterValueArgs(
                value="Standard_LRS",
            ),
        },
        resource_groups={
            "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
                location="eastus",
                name="defaultRG",
            ),
        },
        resource_scope="managementGroups/ContosoOnlineGroup",
        scope="subscriptions/00000000-0000-0000-0000-000000000000")
    
    import * as pulumi from "@pulumi/pulumi";
    import * as azure_native from "@pulumi/azure-native";
    
    const assignment = new azure_native.blueprint.Assignment("assignment", {
        assignmentName: "assignSimpleBlueprint",
        blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity: {
            type: "SystemAssigned",
        },
        location: "eastus",
        parameters: {
            costCenter: {
                value: "Contoso/Online/Shopping/Production",
            },
            owners: {
                value: [
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            },
            storageAccountType: {
                value: "Standard_LRS",
            },
        },
        resourceGroups: {
            storageRG: {
                location: "eastus",
                name: "defaultRG",
            },
        },
        resourceScope: "managementGroups/ContosoOnlineGroup",
        scope: "subscriptions/00000000-0000-0000-0000-000000000000",
    });
    
    resources:
      assignment:
        type: azure-native:blueprint:Assignment
        properties:
          assignmentName: assignSimpleBlueprint
          blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
          description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
          identity:
            type: SystemAssigned
          location: eastus
          parameters:
            costCenter:
              value: Contoso/Online/Shopping/Production
            owners:
              value:
                - johnDoe@contoso.com
                - johnsteam@contoso.com
            storageAccountType:
              value: Standard_LRS
          resourceGroups:
            storageRG:
              location: eastus
              name: defaultRG
          resourceScope: managementGroups/ContosoOnlineGroup
          scope: subscriptions/00000000-0000-0000-0000-000000000000
    

    Assignment with system-assigned managed identity at subscription scope

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AzureNative = Pulumi.AzureNative;
    
    return await Deployment.RunAsync(() => 
    {
        var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
        {
            AssignmentName = "assignSimpleBlueprint",
            BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
            Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
            Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
            {
                Type = "SystemAssigned",
            },
            Location = "eastus",
            Parameters = 
            {
                { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Contoso/Online/Shopping/Production",
                } },
                { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = new[]
                    {
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com",
                    },
                } },
                { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Standard_LRS",
                } },
            },
            ResourceGroups = 
            {
                { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
                {
                    Location = "eastus",
                    Name = "defaultRG",
                } },
            },
            ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-azure-native-sdk/blueprint/v2"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
    			AssignmentName: pulumi.String("assignSimpleBlueprint"),
    			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
    			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
    			Identity: &blueprint.ManagedServiceIdentityArgs{
    				Type: pulumi.String("SystemAssigned"),
    			},
    			Location: pulumi.String("eastus"),
    			Parameters: blueprint.ParameterValueMap{
    				"costCenter": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
    				},
    				"owners": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any{
    						"johnDoe@contoso.com",
    						"johnsteam@contoso.com",
    					},
    				},
    				"storageAccountType": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Standard_LRS"),
    				},
    			},
    			ResourceGroups: blueprint.ResourceGroupValueMap{
    				"storageRG": &blueprint.ResourceGroupValueArgs{
    					Location: pulumi.String("eastus"),
    					Name:     pulumi.String("defaultRG"),
    				},
    			},
    			ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azurenative.blueprint.Assignment;
    import com.pulumi.azurenative.blueprint.AssignmentArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var assignment = new Assignment("assignment", AssignmentArgs.builder()        
                .assignmentName("assignSimpleBlueprint")
                .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
                .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
                .identity(Map.of("type", "SystemAssigned"))
                .location("eastus")
                .parameters(Map.ofEntries(
                    Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                    Map.entry("owners", Map.of("value",                 
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com")),
                    Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
                ))
                .resourceGroups(Map.of("storageRG", Map.ofEntries(
                    Map.entry("location", "eastus"),
                    Map.entry("name", "defaultRG")
                )))
                .resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_azure_native as azure_native
    
    assignment = azure_native.blueprint.Assignment("assignment",
        assignment_name="assignSimpleBlueprint",
        blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity=azure_native.blueprint.ManagedServiceIdentityArgs(
            type="SystemAssigned",
        ),
        location="eastus",
        parameters={
            "costCenter": azure_native.blueprint.ParameterValueArgs(
                value="Contoso/Online/Shopping/Production",
            ),
            "owners": azure_native.blueprint.ParameterValueArgs(
                value=[
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            ),
            "storageAccountType": azure_native.blueprint.ParameterValueArgs(
                value="Standard_LRS",
            ),
        },
        resource_groups={
            "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
                location="eastus",
                name="defaultRG",
            ),
        },
        resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")
    
    import * as pulumi from "@pulumi/pulumi";
    import * as azure_native from "@pulumi/azure-native";
    
    const assignment = new azure_native.blueprint.Assignment("assignment", {
        assignmentName: "assignSimpleBlueprint",
        blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity: {
            type: "SystemAssigned",
        },
        location: "eastus",
        parameters: {
            costCenter: {
                value: "Contoso/Online/Shopping/Production",
            },
            owners: {
                value: [
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            },
            storageAccountType: {
                value: "Standard_LRS",
            },
        },
        resourceGroups: {
            storageRG: {
                location: "eastus",
                name: "defaultRG",
            },
        },
        resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
    });
    
    resources:
      assignment:
        type: azure-native:blueprint:Assignment
        properties:
          assignmentName: assignSimpleBlueprint
          blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
          description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
          identity:
            type: SystemAssigned
          location: eastus
          parameters:
            costCenter:
              value: Contoso/Online/Shopping/Production
            owners:
              value:
                - johnDoe@contoso.com
                - johnsteam@contoso.com
            storageAccountType:
              value: Standard_LRS
          resourceGroups:
            storageRG:
              location: eastus
              name: defaultRG
          resourceScope: subscriptions/00000000-0000-0000-0000-000000000000
    

    Assignment with user-assigned managed identity at management group scope

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AzureNative = Pulumi.AzureNative;
    
    return await Deployment.RunAsync(() => 
    {
        var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
        {
            AssignmentName = "assignSimpleBlueprint",
            BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
            Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
            Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
            {
                Type = "UserAssigned",
                UserAssignedIdentities = 
                {
                    { "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", null },
                },
            },
            Location = "eastus",
            Parameters = 
            {
                { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Contoso/Online/Shopping/Production",
                } },
                { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = new[]
                    {
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com",
                    },
                } },
                { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Standard_LRS",
                } },
            },
            ResourceGroups = 
            {
                { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
                {
                    Location = "eastus",
                    Name = "defaultRG",
                } },
            },
            ResourceScope = "managementGroups/ContosoOnlineGroup",
            Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-azure-native-sdk/blueprint/v2"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
    			AssignmentName: pulumi.String("assignSimpleBlueprint"),
    			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
    			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
    			Identity: blueprint.ManagedServiceIdentityResponse{
    				Type: pulumi.String("UserAssigned"),
    				UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
    					"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
    				},
    			},
    			Location: pulumi.String("eastus"),
    			Parameters: blueprint.ParameterValueMap{
    				"costCenter": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
    				},
    				"owners": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any{
    						"johnDoe@contoso.com",
    						"johnsteam@contoso.com",
    					},
    				},
    				"storageAccountType": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Standard_LRS"),
    				},
    			},
    			ResourceGroups: blueprint.ResourceGroupValueMap{
    				"storageRG": &blueprint.ResourceGroupValueArgs{
    					Location: pulumi.String("eastus"),
    					Name:     pulumi.String("defaultRG"),
    				},
    			},
    			ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
    			Scope:         pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azurenative.blueprint.Assignment;
    import com.pulumi.azurenative.blueprint.AssignmentArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var assignment = new Assignment("assignment", AssignmentArgs.builder()        
                .assignmentName("assignSimpleBlueprint")
                .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
                .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
                .identity(Map.ofEntries(
                    Map.entry("type", "UserAssigned"),
                    Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
                ))
                .location("eastus")
                .parameters(Map.ofEntries(
                    Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                    Map.entry("owners", Map.of("value",                 
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com")),
                    Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
                ))
                .resourceGroups(Map.of("storageRG", Map.ofEntries(
                    Map.entry("location", "eastus"),
                    Map.entry("name", "defaultRG")
                )))
                .resourceScope("managementGroups/ContosoOnlineGroup")
                .scope("subscriptions/00000000-0000-0000-0000-000000000000")
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_azure_native as azure_native
    
    assignment = azure_native.blueprint.Assignment("assignment",
        assignment_name="assignSimpleBlueprint",
        blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity=azure_native.blueprint.ManagedServiceIdentityResponseArgs(
            type="UserAssigned",
            user_assigned_identities={
                "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
            },
        ),
        location="eastus",
        parameters={
            "costCenter": azure_native.blueprint.ParameterValueArgs(
                value="Contoso/Online/Shopping/Production",
            ),
            "owners": azure_native.blueprint.ParameterValueArgs(
                value=[
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            ),
            "storageAccountType": azure_native.blueprint.ParameterValueArgs(
                value="Standard_LRS",
            ),
        },
        resource_groups={
            "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
                location="eastus",
                name="defaultRG",
            ),
        },
        resource_scope="managementGroups/ContosoOnlineGroup",
        scope="subscriptions/00000000-0000-0000-0000-000000000000")
    
    import * as pulumi from "@pulumi/pulumi";
    import * as azure_native from "@pulumi/azure-native";
    
    const assignment = new azure_native.blueprint.Assignment("assignment", {
        assignmentName: "assignSimpleBlueprint",
        blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity: {
            type: "UserAssigned",
            userAssignedIdentities: {
                "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
            },
        },
        location: "eastus",
        parameters: {
            costCenter: {
                value: "Contoso/Online/Shopping/Production",
            },
            owners: {
                value: [
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            },
            storageAccountType: {
                value: "Standard_LRS",
            },
        },
        resourceGroups: {
            storageRG: {
                location: "eastus",
                name: "defaultRG",
            },
        },
        resourceScope: "managementGroups/ContosoOnlineGroup",
        scope: "subscriptions/00000000-0000-0000-0000-000000000000",
    });
    
    resources:
      assignment:
        type: azure-native:blueprint:Assignment
        properties:
          assignmentName: assignSimpleBlueprint
          blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
          description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
          identity:
            type: UserAssigned
            userAssignedIdentities:
              ? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
              : {}
          location: eastus
          parameters:
            costCenter:
              value: Contoso/Online/Shopping/Production
            owners:
              value:
                - johnDoe@contoso.com
                - johnsteam@contoso.com
            storageAccountType:
              value: Standard_LRS
          resourceGroups:
            storageRG:
              location: eastus
              name: defaultRG
          resourceScope: managementGroups/ContosoOnlineGroup
          scope: subscriptions/00000000-0000-0000-0000-000000000000
    

    Assignment with user-assigned managed identity at subscription scope

    using System.Collections.Generic;
    using System.Linq;
    using Pulumi;
    using AzureNative = Pulumi.AzureNative;
    
    return await Deployment.RunAsync(() => 
    {
        var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
        {
            AssignmentName = "assignSimpleBlueprint",
            BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
            Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
            Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
            {
                Type = "UserAssigned",
                UserAssignedIdentities = 
                {
                    { "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", null },
                },
            },
            Location = "eastus",
            Parameters = 
            {
                { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Contoso/Online/Shopping/Production",
                } },
                { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = new[]
                    {
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com",
                    },
                } },
                { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
                {
                    Value = "Standard_LRS",
                } },
            },
            ResourceGroups = 
            {
                { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
                {
                    Location = "eastus",
                    Name = "defaultRG",
                } },
            },
            ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
        });
    
    });
    
    package main
    
    import (
    	"github.com/pulumi/pulumi-azure-native-sdk/blueprint/v2"
    	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
    )
    
    func main() {
    	pulumi.Run(func(ctx *pulumi.Context) error {
    		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
    			AssignmentName: pulumi.String("assignSimpleBlueprint"),
    			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
    			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
    			Identity: blueprint.ManagedServiceIdentityResponse{
    				Type: pulumi.String("UserAssigned"),
    				UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
    					"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
    				},
    			},
    			Location: pulumi.String("eastus"),
    			Parameters: blueprint.ParameterValueMap{
    				"costCenter": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
    				},
    				"owners": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any{
    						"johnDoe@contoso.com",
    						"johnsteam@contoso.com",
    					},
    				},
    				"storageAccountType": &blueprint.ParameterValueArgs{
    					Value: pulumi.Any("Standard_LRS"),
    				},
    			},
    			ResourceGroups: blueprint.ResourceGroupValueMap{
    				"storageRG": &blueprint.ResourceGroupValueArgs{
    					Location: pulumi.String("eastus"),
    					Name:     pulumi.String("defaultRG"),
    				},
    			},
    			ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
    		})
    		if err != nil {
    			return err
    		}
    		return nil
    	})
    }
    
    package generated_program;
    
    import com.pulumi.Context;
    import com.pulumi.Pulumi;
    import com.pulumi.core.Output;
    import com.pulumi.azurenative.blueprint.Assignment;
    import com.pulumi.azurenative.blueprint.AssignmentArgs;
    import java.util.List;
    import java.util.ArrayList;
    import java.util.Map;
    import java.io.File;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    
    public class App {
        public static void main(String[] args) {
            Pulumi.run(App::stack);
        }
    
        public static void stack(Context ctx) {
            var assignment = new Assignment("assignment", AssignmentArgs.builder()        
                .assignmentName("assignSimpleBlueprint")
                .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
                .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
                .identity(Map.ofEntries(
                    Map.entry("type", "UserAssigned"),
                    Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
                ))
                .location("eastus")
                .parameters(Map.ofEntries(
                    Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                    Map.entry("owners", Map.of("value",                 
                        "johnDoe@contoso.com",
                        "johnsteam@contoso.com")),
                    Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
                ))
                .resourceGroups(Map.of("storageRG", Map.ofEntries(
                    Map.entry("location", "eastus"),
                    Map.entry("name", "defaultRG")
                )))
                .resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
                .build());
    
        }
    }
    
    import pulumi
    import pulumi_azure_native as azure_native
    
    assignment = azure_native.blueprint.Assignment("assignment",
        assignment_name="assignSimpleBlueprint",
        blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity=azure_native.blueprint.ManagedServiceIdentityResponseArgs(
            type="UserAssigned",
            user_assigned_identities={
                "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
            },
        ),
        location="eastus",
        parameters={
            "costCenter": azure_native.blueprint.ParameterValueArgs(
                value="Contoso/Online/Shopping/Production",
            ),
            "owners": azure_native.blueprint.ParameterValueArgs(
                value=[
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            ),
            "storageAccountType": azure_native.blueprint.ParameterValueArgs(
                value="Standard_LRS",
            ),
        },
        resource_groups={
            "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
                location="eastus",
                name="defaultRG",
            ),
        },
        resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")
    
    import * as pulumi from "@pulumi/pulumi";
    import * as azure_native from "@pulumi/azure-native";
    
    const assignment = new azure_native.blueprint.Assignment("assignment", {
        assignmentName: "assignSimpleBlueprint",
        blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        identity: {
            type: "UserAssigned",
            userAssignedIdentities: {
                "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
            },
        },
        location: "eastus",
        parameters: {
            costCenter: {
                value: "Contoso/Online/Shopping/Production",
            },
            owners: {
                value: [
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                ],
            },
            storageAccountType: {
                value: "Standard_LRS",
            },
        },
        resourceGroups: {
            storageRG: {
                location: "eastus",
                name: "defaultRG",
            },
        },
        resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
    });
    
    resources:
      assignment:
        type: azure-native:blueprint:Assignment
        properties:
          assignmentName: assignSimpleBlueprint
          blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
          description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
          identity:
            type: UserAssigned
            userAssignedIdentities:
              ? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
              : {}
          location: eastus
          parameters:
            costCenter:
              value: Contoso/Online/Shopping/Production
            owners:
              value:
                - johnDoe@contoso.com
                - johnsteam@contoso.com
            storageAccountType:
              value: Standard_LRS
          resourceGroups:
            storageRG:
              location: eastus
              name: defaultRG
          resourceScope: subscriptions/00000000-0000-0000-0000-000000000000
    

    Create Assignment Resource

    new Assignment(name: string, args: AssignmentArgs, opts?: CustomResourceOptions);
    @overload
    def Assignment(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   assignment_name: Optional[str] = None,
                   blueprint_id: Optional[str] = None,
                   description: Optional[str] = None,
                   display_name: Optional[str] = None,
                   identity: Optional[ManagedServiceIdentityArgs] = None,
                   location: Optional[str] = None,
                   locks: Optional[AssignmentLockSettingsArgs] = None,
                   parameters: Optional[Mapping[str, ParameterValueArgs]] = None,
                   resource_groups: Optional[Mapping[str, ResourceGroupValueArgs]] = None,
                   resource_scope: Optional[str] = None,
                   scope: Optional[str] = None)
    @overload
    def Assignment(resource_name: str,
                   args: AssignmentArgs,
                   opts: Optional[ResourceOptions] = None)
    func NewAssignment(ctx *Context, name string, args AssignmentArgs, opts ...ResourceOption) (*Assignment, error)
    public Assignment(string name, AssignmentArgs args, CustomResourceOptions? opts = null)
    public Assignment(String name, AssignmentArgs args)
    public Assignment(String name, AssignmentArgs args, CustomResourceOptions options)
    
    type: azure-native:blueprint:Assignment
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    name string
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Assignment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Assignment resource accepts the following input properties:

    Identity Pulumi.AzureNative.Blueprint.Inputs.ManagedServiceIdentity
    Managed identity for this blueprint assignment.
    Parameters Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.ParameterValueArgs>
    Blueprint assignment parameter values.
    ResourceGroups Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.ResourceGroupValueArgs>
    Names and locations of resource group placeholders.
    ResourceScope string
    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
    AssignmentName string
    Name of the blueprint assignment.
    BlueprintId string
    ID of the published version of a blueprint definition.
    Description string
    Multi-line explain this resource.
    DisplayName string
    One-liner string explain this resource.
    Location string
    The location of this blueprint assignment.
    Locks Pulumi.AzureNative.Blueprint.Inputs.AssignmentLockSettings
    Defines how resources deployed by a blueprint assignment are locked.
    Scope string
    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
    Identity ManagedServiceIdentityArgs
    Managed identity for this blueprint assignment.
    Parameters map[string]ParameterValueArgs
    Blueprint assignment parameter values.
    ResourceGroups map[string]ResourceGroupValueArgs
    Names and locations of resource group placeholders.
    ResourceScope string
    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
    AssignmentName string
    Name of the blueprint assignment.
    BlueprintId string
    ID of the published version of a blueprint definition.
    Description string
    Multi-line explain this resource.
    DisplayName string
    One-liner string explain this resource.
    Location string
    The location of this blueprint assignment.
    Locks AssignmentLockSettingsArgs
    Defines how resources deployed by a blueprint assignment are locked.
    Scope string
    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
    identity ManagedServiceIdentity
    Managed identity for this blueprint assignment.
    parameters Map<String,ParameterValueArgs>
    Blueprint assignment parameter values.
    resourceGroups Map<String,ResourceGroupValueArgs>
    Names and locations of resource group placeholders.
    resourceScope String
    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
    assignmentName String
    Name of the blueprint assignment.
    blueprintId String
    ID of the published version of a blueprint definition.
    description String
    Multi-line explain this resource.
    displayName String
    One-liner string explain this resource.
    location String
    The location of this blueprint assignment.
    locks AssignmentLockSettings
    Defines how resources deployed by a blueprint assignment are locked.
    scope String
    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
    identity ManagedServiceIdentity
    Managed identity for this blueprint assignment.
    parameters {[key: string]: ParameterValueArgs}
    Blueprint assignment parameter values.
    resourceGroups {[key: string]: ResourceGroupValueArgs}
    Names and locations of resource group placeholders.
    resourceScope string
    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
    assignmentName string
    Name of the blueprint assignment.
    blueprintId string
    ID of the published version of a blueprint definition.
    description string
    Multi-line explain this resource.
    displayName string
    One-liner string explain this resource.
    location string
    The location of this blueprint assignment.
    locks AssignmentLockSettings
    Defines how resources deployed by a blueprint assignment are locked.
    scope string
    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
    identity ManagedServiceIdentityArgs
    Managed identity for this blueprint assignment.
    parameters Mapping[str, ParameterValueArgs]
    Blueprint assignment parameter values.
    resource_groups Mapping[str, ResourceGroupValueArgs]
    Names and locations of resource group placeholders.
    resource_scope str
    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
    assignment_name str
    Name of the blueprint assignment.
    blueprint_id str
    ID of the published version of a blueprint definition.
    description str
    Multi-line explain this resource.
    display_name str
    One-liner string explain this resource.
    location str
    The location of this blueprint assignment.
    locks AssignmentLockSettingsArgs
    Defines how resources deployed by a blueprint assignment are locked.
    scope str
    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.
    identity Property Map
    Managed identity for this blueprint assignment.
    parameters Map<Property Map>
    Blueprint assignment parameter values.
    resourceGroups Map<Property Map>
    Names and locations of resource group placeholders.
    resourceScope String
    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').
    assignmentName String
    Name of the blueprint assignment.
    blueprintId String
    ID of the published version of a blueprint definition.
    description String
    Multi-line explain this resource.
    displayName String
    One-liner string explain this resource.
    location String
    The location of this blueprint assignment.
    locks Property Map
    Defines how resources deployed by a blueprint assignment are locked.
    scope String
    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Assignment resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Name of this resource.
    ProvisioningState string
    State of the blueprint assignment.
    Status Pulumi.AzureNative.Blueprint.Outputs.AssignmentStatusResponse
    Status of blueprint assignment. This field is readonly.
    Type string
    Type of this resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Name of this resource.
    ProvisioningState string
    State of the blueprint assignment.
    Status AssignmentStatusResponse
    Status of blueprint assignment. This field is readonly.
    Type string
    Type of this resource.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Name of this resource.
    provisioningState String
    State of the blueprint assignment.
    status AssignmentStatusResponse
    Status of blueprint assignment. This field is readonly.
    type String
    Type of this resource.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Name of this resource.
    provisioningState string
    State of the blueprint assignment.
    status AssignmentStatusResponse
    Status of blueprint assignment. This field is readonly.
    type string
    Type of this resource.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Name of this resource.
    provisioning_state str
    State of the blueprint assignment.
    status AssignmentStatusResponse
    Status of blueprint assignment. This field is readonly.
    type str
    Type of this resource.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Name of this resource.
    provisioningState String
    State of the blueprint assignment.
    status Property Map
    Status of blueprint assignment. This field is readonly.
    type String
    Type of this resource.

    Supporting Types

    AssignmentLockMode, AssignmentLockModeArgs

    None
    None
    AllResourcesReadOnly
    AllResourcesReadOnly
    AllResourcesDoNotDelete
    AllResourcesDoNotDelete
    AssignmentLockModeNone
    None
    AssignmentLockModeAllResourcesReadOnly
    AllResourcesReadOnly
    AssignmentLockModeAllResourcesDoNotDelete
    AllResourcesDoNotDelete
    None
    None
    AllResourcesReadOnly
    AllResourcesReadOnly
    AllResourcesDoNotDelete
    AllResourcesDoNotDelete
    None
    None
    AllResourcesReadOnly
    AllResourcesReadOnly
    AllResourcesDoNotDelete
    AllResourcesDoNotDelete
    NONE
    None
    ALL_RESOURCES_READ_ONLY
    AllResourcesReadOnly
    ALL_RESOURCES_DO_NOT_DELETE
    AllResourcesDoNotDelete
    "None"
    None
    "AllResourcesReadOnly"
    AllResourcesReadOnly
    "AllResourcesDoNotDelete"
    AllResourcesDoNotDelete

    AssignmentLockSettings, AssignmentLockSettingsArgs

    ExcludedActions List<string>
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    ExcludedPrincipals List<string>
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    Mode string | Pulumi.AzureNative.Blueprint.AssignmentLockMode
    Lock mode.
    ExcludedActions []string
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    ExcludedPrincipals []string
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    Mode string | AssignmentLockMode
    Lock mode.
    excludedActions List<String>
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excludedPrincipals List<String>
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode String | AssignmentLockMode
    Lock mode.
    excludedActions string[]
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excludedPrincipals string[]
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode string | AssignmentLockMode
    Lock mode.
    excluded_actions Sequence[str]
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excluded_principals Sequence[str]
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode str | AssignmentLockMode
    Lock mode.
    excludedActions List<String>
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excludedPrincipals List<String>
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode String | "None" | "AllResourcesReadOnly" | "AllResourcesDoNotDelete"
    Lock mode.

    AssignmentLockSettingsResponse, AssignmentLockSettingsResponseArgs

    ExcludedActions List<string>
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    ExcludedPrincipals List<string>
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    Mode string
    Lock mode.
    ExcludedActions []string
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    ExcludedPrincipals []string
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    Mode string
    Lock mode.
    excludedActions List<String>
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excludedPrincipals List<String>
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode String
    Lock mode.
    excludedActions string[]
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excludedPrincipals string[]
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode string
    Lock mode.
    excluded_actions Sequence[str]
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excluded_principals Sequence[str]
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode str
    Lock mode.
    excludedActions List<String>
    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.
    excludedPrincipals List<String>
    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
    mode String
    Lock mode.

    AssignmentStatusResponse, AssignmentStatusResponseArgs

    LastModified string
    Last modified time of this blueprint definition.
    ManagedResources List<string>
    List of resources that were created by the blueprint assignment.
    TimeCreated string
    Creation time of this blueprint definition.
    LastModified string
    Last modified time of this blueprint definition.
    ManagedResources []string
    List of resources that were created by the blueprint assignment.
    TimeCreated string
    Creation time of this blueprint definition.
    lastModified String
    Last modified time of this blueprint definition.
    managedResources List<String>
    List of resources that were created by the blueprint assignment.
    timeCreated String
    Creation time of this blueprint definition.
    lastModified string
    Last modified time of this blueprint definition.
    managedResources string[]
    List of resources that were created by the blueprint assignment.
    timeCreated string
    Creation time of this blueprint definition.
    last_modified str
    Last modified time of this blueprint definition.
    managed_resources Sequence[str]
    List of resources that were created by the blueprint assignment.
    time_created str
    Creation time of this blueprint definition.
    lastModified String
    Last modified time of this blueprint definition.
    managedResources List<String>
    List of resources that were created by the blueprint assignment.
    timeCreated String
    Creation time of this blueprint definition.

    KeyVaultReference, KeyVaultReferenceArgs

    Id string
    Azure resource ID of the Key Vault.
    Id string
    Azure resource ID of the Key Vault.
    id String
    Azure resource ID of the Key Vault.
    id string
    Azure resource ID of the Key Vault.
    id str
    Azure resource ID of the Key Vault.
    id String
    Azure resource ID of the Key Vault.

    KeyVaultReferenceResponse, KeyVaultReferenceResponseArgs

    Id string
    Azure resource ID of the Key Vault.
    Id string
    Azure resource ID of the Key Vault.
    id String
    Azure resource ID of the Key Vault.
    id string
    Azure resource ID of the Key Vault.
    id str
    Azure resource ID of the Key Vault.
    id String
    Azure resource ID of the Key Vault.

    ManagedServiceIdentity, ManagedServiceIdentityArgs

    Type string | Pulumi.AzureNative.Blueprint.ManagedServiceIdentityType
    Type of the managed identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    TenantId string
    ID of the Azure Active Directory.
    UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.UserAssignedIdentity>
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    Type string | ManagedServiceIdentityType
    Type of the managed identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    TenantId string
    ID of the Azure Active Directory.
    UserAssignedIdentities map[string]UserAssignedIdentity
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type String | ManagedServiceIdentityType
    Type of the managed identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.
    tenantId String
    ID of the Azure Active Directory.
    userAssignedIdentities Map<String,UserAssignedIdentity>
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type string | ManagedServiceIdentityType
    Type of the managed identity.
    principalId string
    Azure Active Directory principal ID associated with this Identity.
    tenantId string
    ID of the Azure Active Directory.
    userAssignedIdentities {[key: string]: UserAssignedIdentity}
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type str | ManagedServiceIdentityType
    Type of the managed identity.
    principal_id str
    Azure Active Directory principal ID associated with this Identity.
    tenant_id str
    ID of the Azure Active Directory.
    user_assigned_identities Mapping[str, UserAssignedIdentity]
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type String | "None" | "SystemAssigned" | "UserAssigned"
    Type of the managed identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.
    tenantId String
    ID of the Azure Active Directory.
    userAssignedIdentities Map<Property Map>
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    ManagedServiceIdentityResponse, ManagedServiceIdentityResponseArgs

    Type string
    Type of the managed identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    TenantId string
    ID of the Azure Active Directory.
    UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.UserAssignedIdentityResponse>
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    Type string
    Type of the managed identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    TenantId string
    ID of the Azure Active Directory.
    UserAssignedIdentities map[string]UserAssignedIdentityResponse
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type String
    Type of the managed identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.
    tenantId String
    ID of the Azure Active Directory.
    userAssignedIdentities Map<String,UserAssignedIdentityResponse>
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type string
    Type of the managed identity.
    principalId string
    Azure Active Directory principal ID associated with this Identity.
    tenantId string
    ID of the Azure Active Directory.
    userAssignedIdentities {[key: string]: UserAssignedIdentityResponse}
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type str
    Type of the managed identity.
    principal_id str
    Azure Active Directory principal ID associated with this Identity.
    tenant_id str
    ID of the Azure Active Directory.
    user_assigned_identities Mapping[str, UserAssignedIdentityResponse]
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
    type String
    Type of the managed identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.
    tenantId String
    ID of the Azure Active Directory.
    userAssignedIdentities Map<Property Map>
    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    ManagedServiceIdentityType, ManagedServiceIdentityTypeArgs

    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    ManagedServiceIdentityTypeNone
    None
    ManagedServiceIdentityTypeSystemAssigned
    SystemAssigned
    ManagedServiceIdentityTypeUserAssigned
    UserAssigned
    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    NONE
    None
    SYSTEM_ASSIGNED
    SystemAssigned
    USER_ASSIGNED
    UserAssigned
    "None"
    None
    "SystemAssigned"
    SystemAssigned
    "UserAssigned"
    UserAssigned

    ParameterValue, ParameterValueArgs

    Reference Pulumi.AzureNative.Blueprint.Inputs.SecretValueReference
    Parameter value as reference type.
    Value object
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    Reference SecretValueReference
    Parameter value as reference type.
    Value interface{}
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference SecretValueReference
    Parameter value as reference type.
    value Object
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference SecretValueReference
    Parameter value as reference type.
    value any
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference SecretValueReference
    Parameter value as reference type.
    value Any
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference Property Map
    Parameter value as reference type.
    value Any
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    ParameterValueResponse, ParameterValueResponseArgs

    Reference Pulumi.AzureNative.Blueprint.Inputs.SecretValueReferenceResponse
    Parameter value as reference type.
    Value object
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    Reference SecretValueReferenceResponse
    Parameter value as reference type.
    Value interface{}
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference SecretValueReferenceResponse
    Parameter value as reference type.
    value Object
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference SecretValueReferenceResponse
    Parameter value as reference type.
    value any
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference SecretValueReferenceResponse
    Parameter value as reference type.
    value Any
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.
    reference Property Map
    Parameter value as reference type.
    value Any
    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    ResourceGroupValue, ResourceGroupValueArgs

    Location string
    Location of the resource group.
    Name string
    Name of the resource group.
    Location string
    Location of the resource group.
    Name string
    Name of the resource group.
    location String
    Location of the resource group.
    name String
    Name of the resource group.
    location string
    Location of the resource group.
    name string
    Name of the resource group.
    location str
    Location of the resource group.
    name str
    Name of the resource group.
    location String
    Location of the resource group.
    name String
    Name of the resource group.

    ResourceGroupValueResponse, ResourceGroupValueResponseArgs

    Location string
    Location of the resource group.
    Name string
    Name of the resource group.
    Location string
    Location of the resource group.
    Name string
    Name of the resource group.
    location String
    Location of the resource group.
    name String
    Name of the resource group.
    location string
    Location of the resource group.
    name string
    Name of the resource group.
    location str
    Location of the resource group.
    name str
    Name of the resource group.
    location String
    Location of the resource group.
    name String
    Name of the resource group.

    SecretValueReference, SecretValueReferenceArgs

    KeyVault Pulumi.AzureNative.Blueprint.Inputs.KeyVaultReference
    Specifies the reference to a given Azure Key Vault.
    SecretName string
    Name of the secret.
    SecretVersion string
    The version of the secret to use. If left blank, the latest version of the secret is used.
    KeyVault KeyVaultReference
    Specifies the reference to a given Azure Key Vault.
    SecretName string
    Name of the secret.
    SecretVersion string
    The version of the secret to use. If left blank, the latest version of the secret is used.
    keyVault KeyVaultReference
    Specifies the reference to a given Azure Key Vault.
    secretName String
    Name of the secret.
    secretVersion String
    The version of the secret to use. If left blank, the latest version of the secret is used.
    keyVault KeyVaultReference
    Specifies the reference to a given Azure Key Vault.
    secretName string
    Name of the secret.
    secretVersion string
    The version of the secret to use. If left blank, the latest version of the secret is used.
    key_vault KeyVaultReference
    Specifies the reference to a given Azure Key Vault.
    secret_name str
    Name of the secret.
    secret_version str
    The version of the secret to use. If left blank, the latest version of the secret is used.
    keyVault Property Map
    Specifies the reference to a given Azure Key Vault.
    secretName String
    Name of the secret.
    secretVersion String
    The version of the secret to use. If left blank, the latest version of the secret is used.

    SecretValueReferenceResponse, SecretValueReferenceResponseArgs

    KeyVault Pulumi.AzureNative.Blueprint.Inputs.KeyVaultReferenceResponse
    Specifies the reference to a given Azure Key Vault.
    SecretName string
    Name of the secret.
    SecretVersion string
    The version of the secret to use. If left blank, the latest version of the secret is used.
    KeyVault KeyVaultReferenceResponse
    Specifies the reference to a given Azure Key Vault.
    SecretName string
    Name of the secret.
    SecretVersion string
    The version of the secret to use. If left blank, the latest version of the secret is used.
    keyVault KeyVaultReferenceResponse
    Specifies the reference to a given Azure Key Vault.
    secretName String
    Name of the secret.
    secretVersion String
    The version of the secret to use. If left blank, the latest version of the secret is used.
    keyVault KeyVaultReferenceResponse
    Specifies the reference to a given Azure Key Vault.
    secretName string
    Name of the secret.
    secretVersion string
    The version of the secret to use. If left blank, the latest version of the secret is used.
    key_vault KeyVaultReferenceResponse
    Specifies the reference to a given Azure Key Vault.
    secret_name str
    Name of the secret.
    secret_version str
    The version of the secret to use. If left blank, the latest version of the secret is used.
    keyVault Property Map
    Specifies the reference to a given Azure Key Vault.
    secretName String
    Name of the secret.
    secretVersion String
    The version of the secret to use. If left blank, the latest version of the secret is used.

    UserAssignedIdentity, UserAssignedIdentityArgs

    ClientId string
    Client App Id associated with this identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    ClientId string
    Client App Id associated with this identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    clientId String
    Client App Id associated with this identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.
    clientId string
    Client App Id associated with this identity.
    principalId string
    Azure Active Directory principal ID associated with this Identity.
    client_id str
    Client App Id associated with this identity.
    principal_id str
    Azure Active Directory principal ID associated with this Identity.
    clientId String
    Client App Id associated with this identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.

    UserAssignedIdentityResponse, UserAssignedIdentityResponseArgs

    ClientId string
    Client App Id associated with this identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    ClientId string
    Client App Id associated with this identity.
    PrincipalId string
    Azure Active Directory principal ID associated with this Identity.
    clientId String
    Client App Id associated with this identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.
    clientId string
    Client App Id associated with this identity.
    principalId string
    Azure Active Directory principal ID associated with this Identity.
    client_id str
    Client App Id associated with this identity.
    principal_id str
    Azure Active Directory principal ID associated with this Identity.
    clientId String
    Client App Id associated with this identity.
    principalId String
    Azure Active Directory principal ID associated with this Identity.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:blueprint:Assignment assignSimpleBlueprint /{resourceScope}/providers/Microsoft.Blueprint/blueprintAssignments/{assignmentName} 
    

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
    Azure Native v2.29.0 published on Friday, Feb 16, 2024 by Pulumi