Docs Packages
  1. Packages
  2. Azure Native
  3. API Docs
  4. blueprint
  5. Assignment
Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi
pulumi/pulumi-azure-native

azure-native.blueprint.Assignment

Explore with Pulumi AI

azure-native logo
Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi
pulumi/pulumi-azure-native

    Represents a blueprint assignment. API Version: 2018-11-01-preview.

    Example Usage

    Assignment with system-assigned managed identity at management group scope

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "SystemAssigned",
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "managementGroups/ContosoOnlineGroup",
        Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});

    package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: &blueprint.ManagedServiceIdentityArgs{
				Type: pulumi.String("SystemAssigned"),
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
			Scope:         pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.of("type", "SystemAssigned"))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("managementGroups/ContosoOnlineGroup")
            .scope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}

    import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityArgs(
        type="SystemAssigned",
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="managementGroups/ContosoOnlineGroup",
    scope="subscriptions/00000000-0000-0000-0000-000000000000")

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "SystemAssigned",
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "managementGroups/ContosoOnlineGroup",
    scope: "subscriptions/00000000-0000-0000-0000-000000000000",
});

    resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: SystemAssigned
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: managementGroups/ContosoOnlineGroup
      scope: subscriptions/00000000-0000-0000-0000-000000000000

    Assignment with system-assigned managed identity at subscription scope

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "SystemAssigned",
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});

    package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: &blueprint.ManagedServiceIdentityArgs{
				Type: pulumi.String("SystemAssigned"),
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.of("type", "SystemAssigned"))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}

    import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityArgs(
        type="SystemAssigned",
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "SystemAssigned",
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
});

    resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: SystemAssigned
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: subscriptions/00000000-0000-0000-0000-000000000000

    Assignment with user-assigned managed identity at management group scope

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "UserAssigned",
            UserAssignedIdentities = 
            {
                { "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", null },
            },
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "managementGroups/ContosoOnlineGroup",
        Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});

    package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: blueprint.ManagedServiceIdentityResponse{
				Type: pulumi.String("UserAssigned"),
				UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
					"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
				},
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
			Scope:         pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.ofEntries(
                Map.entry("type", "UserAssigned"),
                Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
            ))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("managementGroups/ContosoOnlineGroup")
            .scope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}

    import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityResponseArgs(
        type="UserAssigned",
        user_assigned_identities={
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
        },
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="managementGroups/ContosoOnlineGroup",
    scope="subscriptions/00000000-0000-0000-0000-000000000000")

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "UserAssigned",
        userAssignedIdentities: {
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
        },
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "managementGroups/ContosoOnlineGroup",
    scope: "subscriptions/00000000-0000-0000-0000-000000000000",
});

    resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: UserAssigned
        userAssignedIdentities:
          ? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
          : {}
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: managementGroups/ContosoOnlineGroup
      scope: subscriptions/00000000-0000-0000-0000-000000000000

    Assignment with user-assigned managed identity at subscription scope

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "UserAssigned",
            UserAssignedIdentities = 
            {
                { "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", null },
            },
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});

    package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native-sdk/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: blueprint.ManagedServiceIdentityResponse{
				Type: pulumi.String("UserAssigned"),
				UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
					"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
				},
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.ofEntries(
                Map.entry("type", "UserAssigned"),
                Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
            ))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}

    import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityResponseArgs(
        type="UserAssigned",
        user_assigned_identities={
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
        },
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "UserAssigned",
        userAssignedIdentities: {
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
        },
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
});

    resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: UserAssigned
        userAssignedIdentities:
          ? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
          : {}
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: subscriptions/00000000-0000-0000-0000-000000000000

    Create Assignment Resource

    new Assignment(name: string, args: AssignmentArgs, opts?: CustomResourceOptions);
    @overload
def Assignment(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               assignment_name: Optional[str] = None,
               blueprint_id: Optional[str] = None,
               description: Optional[str] = None,
               display_name: Optional[str] = None,
               identity: Optional[ManagedServiceIdentityArgs] = None,
               location: Optional[str] = None,
               locks: Optional[AssignmentLockSettingsArgs] = None,
               parameters: Optional[Mapping[str, ParameterValueArgs]] = None,
               resource_groups: Optional[Mapping[str, ResourceGroupValueArgs]] = None,
               resource_scope: Optional[str] = None,
               scope: Optional[str] = None)
@overload
def Assignment(resource_name: str,
               args: AssignmentArgs,
               opts: Optional[ResourceOptions] = None)
    func NewAssignment(ctx *Context, name string, args AssignmentArgs, opts ...ResourceOption) (*Assignment, error)
    public Assignment(string name, AssignmentArgs args, CustomResourceOptions? opts = null)
    public Assignment(String name, AssignmentArgs args)
public Assignment(String name, AssignmentArgs args, CustomResourceOptions options)

    type: azure-native:blueprint:Assignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AssignmentArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Assignment Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Assignment resource accepts the following input properties:

    Identity Pulumi.AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs

    Managed identity for this blueprint assignment.

    Parameters Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.ParameterValueArgs>

    Blueprint assignment parameter values.

    ResourceGroups Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.ResourceGroupValueArgs>

    Names and locations of resource group placeholders.

    ResourceScope string

    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

    AssignmentName string

    Name of the blueprint assignment.

    BlueprintId string

    ID of the published version of a blueprint definition.

    Description string

    Multi-line explain this resource.

    DisplayName string

    One-liner string explain this resource.

    Location string

    The location of this blueprint assignment.

    Locks Pulumi.AzureNative.Blueprint.Inputs.AssignmentLockSettingsArgs

    Defines how resources deployed by a blueprint assignment are locked.

    Scope string

    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

    Identity ManagedServiceIdentityArgs

    Managed identity for this blueprint assignment.

    Parameters map[string]ParameterValueArgs

    Blueprint assignment parameter values.

    ResourceGroups map[string]ResourceGroupValueArgs

    Names and locations of resource group placeholders.

    ResourceScope string

    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

    AssignmentName string

    Name of the blueprint assignment.

    BlueprintId string

    ID of the published version of a blueprint definition.

    Description string

    Multi-line explain this resource.

    DisplayName string

    One-liner string explain this resource.

    Location string

    The location of this blueprint assignment.

    Locks AssignmentLockSettingsArgs

    Defines how resources deployed by a blueprint assignment are locked.

    Scope string

    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

    identity ManagedServiceIdentityArgs

    Managed identity for this blueprint assignment.

    parameters Map<String,ParameterValueArgs>

    Blueprint assignment parameter values.

    resourceGroups Map<String,ResourceGroupValueArgs>

    Names and locations of resource group placeholders.

    resourceScope String

    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

    assignmentName String

    Name of the blueprint assignment.

    blueprintId String

    ID of the published version of a blueprint definition.

    description String

    Multi-line explain this resource.

    displayName String

    One-liner string explain this resource.

    location String

    The location of this blueprint assignment.

    locks AssignmentLockSettingsArgs

    Defines how resources deployed by a blueprint assignment are locked.

    scope String

    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

    identity ManagedServiceIdentityArgs

    Managed identity for this blueprint assignment.

    parameters {[key: string]: ParameterValueArgs}

    Blueprint assignment parameter values.

    resourceGroups {[key: string]: ResourceGroupValueArgs}

    Names and locations of resource group placeholders.

    resourceScope string

    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

    assignmentName string

    Name of the blueprint assignment.

    blueprintId string

    ID of the published version of a blueprint definition.

    description string

    Multi-line explain this resource.

    displayName string

    One-liner string explain this resource.

    location string

    The location of this blueprint assignment.

    locks AssignmentLockSettingsArgs

    Defines how resources deployed by a blueprint assignment are locked.

    scope string

    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

    identity ManagedServiceIdentityArgs

    Managed identity for this blueprint assignment.

    parameters Mapping[str, ParameterValueArgs]

    Blueprint assignment parameter values.

    resource_groups Mapping[str, ResourceGroupValueArgs]

    Names and locations of resource group placeholders.

    resource_scope str

    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

    assignment_name str

    Name of the blueprint assignment.

    blueprint_id str

    ID of the published version of a blueprint definition.

    description str

    Multi-line explain this resource.

    display_name str

    One-liner string explain this resource.

    location str

    The location of this blueprint assignment.

    locks AssignmentLockSettingsArgs

    Defines how resources deployed by a blueprint assignment are locked.

    scope str

    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

    identity Property Map

    Managed identity for this blueprint assignment.

    parameters Map<Property Map>

    Blueprint assignment parameter values.

    resourceGroups Map<Property Map>

    Names and locations of resource group placeholders.

    resourceScope String

    The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

    assignmentName String

    Name of the blueprint assignment.

    blueprintId String

    ID of the published version of a blueprint definition.

    description String

    Multi-line explain this resource.

    displayName String

    One-liner string explain this resource.

    location String

    The location of this blueprint assignment.

    locks Property Map

    Defines how resources deployed by a blueprint assignment are locked.

    scope String

    The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Assignment resource produces the following output properties:

    Id string

    The provider-assigned unique ID for this managed resource.

    Name string

    Name of this resource.

    ProvisioningState string

    State of the blueprint assignment.

    Status Pulumi.AzureNative.Blueprint.Outputs.AssignmentStatusResponse

    Status of blueprint assignment. This field is readonly.

    Type string

    Type of this resource.

    Id string

    The provider-assigned unique ID for this managed resource.

    Name string

    Name of this resource.

    ProvisioningState string

    State of the blueprint assignment.

    Status AssignmentStatusResponse

    Status of blueprint assignment. This field is readonly.

    Type string

    Type of this resource.

    id String

    The provider-assigned unique ID for this managed resource.

    name String

    Name of this resource.

    provisioningState String

    State of the blueprint assignment.

    status AssignmentStatusResponse

    Status of blueprint assignment. This field is readonly.

    type String

    Type of this resource.

    id string

    The provider-assigned unique ID for this managed resource.

    name string

    Name of this resource.

    provisioningState string

    State of the blueprint assignment.

    status AssignmentStatusResponse

    Status of blueprint assignment. This field is readonly.

    type string

    Type of this resource.

    id str

    The provider-assigned unique ID for this managed resource.

    name str

    Name of this resource.

    provisioning_state str

    State of the blueprint assignment.

    status AssignmentStatusResponse

    Status of blueprint assignment. This field is readonly.

    type str

    Type of this resource.

    id String

    The provider-assigned unique ID for this managed resource.

    name String

    Name of this resource.

    provisioningState String

    State of the blueprint assignment.

    status Property Map

    Status of blueprint assignment. This field is readonly.

    type String

    Type of this resource.

    Supporting Types

    AssignmentLockMode

    None
    None
    AllResourcesReadOnly
    AllResourcesReadOnly
    AllResourcesDoNotDelete
    AllResourcesDoNotDelete
    AssignmentLockModeNone
    None
    AssignmentLockModeAllResourcesReadOnly
    AllResourcesReadOnly
    AssignmentLockModeAllResourcesDoNotDelete
    AllResourcesDoNotDelete
    None
    None
    AllResourcesReadOnly
    AllResourcesReadOnly
    AllResourcesDoNotDelete
    AllResourcesDoNotDelete
    None
    None
    AllResourcesReadOnly
    AllResourcesReadOnly
    AllResourcesDoNotDelete
    AllResourcesDoNotDelete
    NONE
    None
    ALL_RESOURCES_READ_ONLY
    AllResourcesReadOnly
    ALL_RESOURCES_DO_NOT_DELETE
    AllResourcesDoNotDelete
    "None"
    None
    "AllResourcesReadOnly"
    AllResourcesReadOnly
    "AllResourcesDoNotDelete"
    AllResourcesDoNotDelete

    AssignmentLockSettings

    ExcludedActions List<string>

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    ExcludedPrincipals List<string>

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    Mode string | Pulumi.AzureNative.Blueprint.AssignmentLockMode

    Lock mode.

    ExcludedActions []string

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    ExcludedPrincipals []string

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    Mode string | AssignmentLockMode

    Lock mode.

    excludedActions List<String>

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excludedPrincipals List<String>

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode String | AssignmentLockMode

    Lock mode.

    excludedActions string[]

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excludedPrincipals string[]

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode string | AssignmentLockMode

    Lock mode.

    excluded_actions Sequence[str]

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excluded_principals Sequence[str]

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode str | AssignmentLockMode

    Lock mode.

    excludedActions List<String>

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excludedPrincipals List<String>

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode String | "None" | "AllResourcesReadOnly" | "AllResourcesDoNotDelete"

    Lock mode.

    AssignmentLockSettingsResponse

    ExcludedActions List<string>

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    ExcludedPrincipals List<string>

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    Mode string

    Lock mode.

    ExcludedActions []string

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    ExcludedPrincipals []string

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    Mode string

    Lock mode.

    excludedActions List<String>

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excludedPrincipals List<String>

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode String

    Lock mode.

    excludedActions string[]

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excludedPrincipals string[]

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode string

    Lock mode.

    excluded_actions Sequence[str]

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excluded_principals Sequence[str]

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode str

    Lock mode.

    excludedActions List<String>

    List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

    excludedPrincipals List<String>

    List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

    mode String

    Lock mode.

    AssignmentStatusResponse

    LastModified string

    Last modified time of this blueprint definition.

    ManagedResources List<string>

    List of resources that were created by the blueprint assignment.

    TimeCreated string

    Creation time of this blueprint definition.

    LastModified string

    Last modified time of this blueprint definition.

    ManagedResources []string

    List of resources that were created by the blueprint assignment.

    TimeCreated string

    Creation time of this blueprint definition.

    lastModified String

    Last modified time of this blueprint definition.

    managedResources List<String>

    List of resources that were created by the blueprint assignment.

    timeCreated String

    Creation time of this blueprint definition.

    lastModified string

    Last modified time of this blueprint definition.

    managedResources string[]

    List of resources that were created by the blueprint assignment.

    timeCreated string

    Creation time of this blueprint definition.

    last_modified str

    Last modified time of this blueprint definition.

    managed_resources Sequence[str]

    List of resources that were created by the blueprint assignment.

    time_created str

    Creation time of this blueprint definition.

    lastModified String

    Last modified time of this blueprint definition.

    managedResources List<String>

    List of resources that were created by the blueprint assignment.

    timeCreated String

    Creation time of this blueprint definition.

    KeyVaultReference

    Id string

    Azure resource ID of the Key Vault.

    Id string

    Azure resource ID of the Key Vault.

    id String

    Azure resource ID of the Key Vault.

    id string

    Azure resource ID of the Key Vault.

    id str

    Azure resource ID of the Key Vault.

    id String

    Azure resource ID of the Key Vault.

    KeyVaultReferenceResponse

    Id string

    Azure resource ID of the Key Vault.

    Id string

    Azure resource ID of the Key Vault.

    id String

    Azure resource ID of the Key Vault.

    id string

    Azure resource ID of the Key Vault.

    id str

    Azure resource ID of the Key Vault.

    id String

    Azure resource ID of the Key Vault.

    ManagedServiceIdentity

    Type string | Pulumi.AzureNative.Blueprint.ManagedServiceIdentityType

    Type of the managed identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    TenantId string

    ID of the Azure Active Directory.

    UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.UserAssignedIdentity>

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    Type string | ManagedServiceIdentityType

    Type of the managed identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    TenantId string

    ID of the Azure Active Directory.

    UserAssignedIdentities map[string]UserAssignedIdentity

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type String | ManagedServiceIdentityType

    Type of the managed identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    tenantId String

    ID of the Azure Active Directory.

    userAssignedIdentities Map<String,UserAssignedIdentity>

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type string | ManagedServiceIdentityType

    Type of the managed identity.

    principalId string

    Azure Active Directory principal ID associated with this Identity.

    tenantId string

    ID of the Azure Active Directory.

    userAssignedIdentities {[key: string]: UserAssignedIdentity}

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type str | ManagedServiceIdentityType

    Type of the managed identity.

    principal_id str

    Azure Active Directory principal ID associated with this Identity.

    tenant_id str

    ID of the Azure Active Directory.

    user_assigned_identities Mapping[str, UserAssignedIdentity]

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type String | "None" | "SystemAssigned" | "UserAssigned"

    Type of the managed identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    tenantId String

    ID of the Azure Active Directory.

    userAssignedIdentities Map<Property Map>

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    ManagedServiceIdentityResponse

    Type string

    Type of the managed identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    TenantId string

    ID of the Azure Active Directory.

    UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.UserAssignedIdentityResponse>

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    Type string

    Type of the managed identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    TenantId string

    ID of the Azure Active Directory.

    UserAssignedIdentities map[string]UserAssignedIdentityResponse

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type String

    Type of the managed identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    tenantId String

    ID of the Azure Active Directory.

    userAssignedIdentities Map<String,UserAssignedIdentityResponse>

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type string

    Type of the managed identity.

    principalId string

    Azure Active Directory principal ID associated with this Identity.

    tenantId string

    ID of the Azure Active Directory.

    userAssignedIdentities {[key: string]: UserAssignedIdentityResponse}

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type str

    Type of the managed identity.

    principal_id str

    Azure Active Directory principal ID associated with this Identity.

    tenant_id str

    ID of the Azure Active Directory.

    user_assigned_identities Mapping[str, UserAssignedIdentityResponse]

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    type String

    Type of the managed identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    tenantId String

    ID of the Azure Active Directory.

    userAssignedIdentities Map<Property Map>

    The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

    ManagedServiceIdentityType

    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    ManagedServiceIdentityTypeNone
    None
    ManagedServiceIdentityTypeSystemAssigned
    SystemAssigned
    ManagedServiceIdentityTypeUserAssigned
    UserAssigned
    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    None
    None
    SystemAssigned
    SystemAssigned
    UserAssigned
    UserAssigned
    NONE
    None
    SYSTEM_ASSIGNED
    SystemAssigned
    USER_ASSIGNED
    UserAssigned
    "None"
    None
    "SystemAssigned"
    SystemAssigned
    "UserAssigned"
    UserAssigned

    ParameterValue

    Reference Pulumi.AzureNative.Blueprint.Inputs.SecretValueReference

    Parameter value as reference type.

    Value object

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    Reference SecretValueReference

    Parameter value as reference type.

    Value interface{}

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference SecretValueReference

    Parameter value as reference type.

    value Object

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference SecretValueReference

    Parameter value as reference type.

    value any

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference SecretValueReference

    Parameter value as reference type.

    value Any

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference Property Map

    Parameter value as reference type.

    value Any

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    ParameterValueResponse

    Reference Pulumi.AzureNative.Blueprint.Inputs.SecretValueReferenceResponse

    Parameter value as reference type.

    Value object

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    Reference SecretValueReferenceResponse

    Parameter value as reference type.

    Value interface{}

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference SecretValueReferenceResponse

    Parameter value as reference type.

    value Object

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference SecretValueReferenceResponse

    Parameter value as reference type.

    value any

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference SecretValueReferenceResponse

    Parameter value as reference type.

    value Any

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    reference Property Map

    Parameter value as reference type.

    value Any

    Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

    ResourceGroupValue

    Location string

    Location of the resource group.

    Name string

    Name of the resource group.

    Location string

    Location of the resource group.

    Name string

    Name of the resource group.

    location String

    Location of the resource group.

    name String

    Name of the resource group.

    location string

    Location of the resource group.

    name string

    Name of the resource group.

    location str

    Location of the resource group.

    name str

    Name of the resource group.

    location String

    Location of the resource group.

    name String

    Name of the resource group.

    ResourceGroupValueResponse

    Location string

    Location of the resource group.

    Name string

    Name of the resource group.

    Location string

    Location of the resource group.

    Name string

    Name of the resource group.

    location String

    Location of the resource group.

    name String

    Name of the resource group.

    location string

    Location of the resource group.

    name string

    Name of the resource group.

    location str

    Location of the resource group.

    name str

    Name of the resource group.

    location String

    Location of the resource group.

    name String

    Name of the resource group.

    SecretValueReference

    KeyVault Pulumi.AzureNative.Blueprint.Inputs.KeyVaultReference

    Specifies the reference to a given Azure Key Vault.

    SecretName string

    Name of the secret.

    SecretVersion string

    The version of the secret to use. If left blank, the latest version of the secret is used.

    KeyVault KeyVaultReference

    Specifies the reference to a given Azure Key Vault.

    SecretName string

    Name of the secret.

    SecretVersion string

    The version of the secret to use. If left blank, the latest version of the secret is used.

    keyVault KeyVaultReference

    Specifies the reference to a given Azure Key Vault.

    secretName String

    Name of the secret.

    secretVersion String

    The version of the secret to use. If left blank, the latest version of the secret is used.

    keyVault KeyVaultReference

    Specifies the reference to a given Azure Key Vault.

    secretName string

    Name of the secret.

    secretVersion string

    The version of the secret to use. If left blank, the latest version of the secret is used.

    key_vault KeyVaultReference

    Specifies the reference to a given Azure Key Vault.

    secret_name str

    Name of the secret.

    secret_version str

    The version of the secret to use. If left blank, the latest version of the secret is used.

    keyVault Property Map

    Specifies the reference to a given Azure Key Vault.

    secretName String

    Name of the secret.

    secretVersion String

    The version of the secret to use. If left blank, the latest version of the secret is used.

    SecretValueReferenceResponse

    KeyVault Pulumi.AzureNative.Blueprint.Inputs.KeyVaultReferenceResponse

    Specifies the reference to a given Azure Key Vault.

    SecretName string

    Name of the secret.

    SecretVersion string

    The version of the secret to use. If left blank, the latest version of the secret is used.

    KeyVault KeyVaultReferenceResponse

    Specifies the reference to a given Azure Key Vault.

    SecretName string

    Name of the secret.

    SecretVersion string

    The version of the secret to use. If left blank, the latest version of the secret is used.

    keyVault KeyVaultReferenceResponse

    Specifies the reference to a given Azure Key Vault.

    secretName String

    Name of the secret.

    secretVersion String

    The version of the secret to use. If left blank, the latest version of the secret is used.

    keyVault KeyVaultReferenceResponse

    Specifies the reference to a given Azure Key Vault.

    secretName string

    Name of the secret.

    secretVersion string

    The version of the secret to use. If left blank, the latest version of the secret is used.

    key_vault KeyVaultReferenceResponse

    Specifies the reference to a given Azure Key Vault.

    secret_name str

    Name of the secret.

    secret_version str

    The version of the secret to use. If left blank, the latest version of the secret is used.

    keyVault Property Map

    Specifies the reference to a given Azure Key Vault.

    secretName String

    Name of the secret.

    secretVersion String

    The version of the secret to use. If left blank, the latest version of the secret is used.

    UserAssignedIdentity

    ClientId string

    Client App Id associated with this identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    ClientId string

    Client App Id associated with this identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    clientId String

    Client App Id associated with this identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    clientId string

    Client App Id associated with this identity.

    principalId string

    Azure Active Directory principal ID associated with this Identity.

    client_id str

    Client App Id associated with this identity.

    principal_id str

    Azure Active Directory principal ID associated with this Identity.

    clientId String

    Client App Id associated with this identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    UserAssignedIdentityResponse

    ClientId string

    Client App Id associated with this identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    ClientId string

    Client App Id associated with this identity.

    PrincipalId string

    Azure Active Directory principal ID associated with this Identity.

    clientId String

    Client App Id associated with this identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    clientId string

    Client App Id associated with this identity.

    principalId string

    Azure Active Directory principal ID associated with this Identity.

    client_id str

    Client App Id associated with this identity.

    principal_id str

    Azure Active Directory principal ID associated with this Identity.

    clientId String

    Client App Id associated with this identity.

    principalId String

    Azure Active Directory principal ID associated with this Identity.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:blueprint:Assignment assignSimpleBlueprint /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Blueprint/blueprintAssignments/assignSimpleBlueprint

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    Azure Native v1.103.0 published on Friday, Jun 2, 2023 by Pulumi
    pulumi/pulumi-azure-native