Azure Native

Pulumi Official
Package maintained by Pulumi
v1.68.1 published on Monday, Aug 15, 2022 by Pulumi

Assignment

Represents a blueprint assignment. API Version: 2018-11-01-preview.

Example Usage

Assignment with system-assigned managed identity at management group scope

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "SystemAssigned",
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "managementGroups/ContosoOnlineGroup",
        Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});
package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native/sdk/go/azure/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: &blueprint.ManagedServiceIdentityArgs{
				Type: pulumi.String("SystemAssigned"),
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
			Scope:         pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.of("type", "SystemAssigned"))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("managementGroups/ContosoOnlineGroup")
            .scope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityArgs(
        type="SystemAssigned",
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="managementGroups/ContosoOnlineGroup",
    scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "SystemAssigned",
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "managementGroups/ContosoOnlineGroup",
    scope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: SystemAssigned
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: managementGroups/ContosoOnlineGroup
      scope: subscriptions/00000000-0000-0000-0000-000000000000

Assignment with system-assigned managed identity at subscription scope

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "SystemAssigned",
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});
package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native/sdk/go/azure/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: &blueprint.ManagedServiceIdentityArgs{
				Type: pulumi.String("SystemAssigned"),
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.of("type", "SystemAssigned"))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityArgs(
        type="SystemAssigned",
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "SystemAssigned",
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: SystemAssigned
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: subscriptions/00000000-0000-0000-0000-000000000000

Assignment with user-assigned managed identity at management group scope

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "UserAssigned",
            UserAssignedIdentities = 
            {
                { "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity",  },
            },
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "managementGroups/ContosoOnlineGroup",
        Scope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});
package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native/sdk/go/azure/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: &blueprint.ManagedServiceIdentityArgs{
				Type: pulumi.String("UserAssigned"),
				UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
					"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
				},
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("managementGroups/ContosoOnlineGroup"),
			Scope:         pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.ofEntries(
                Map.entry("type", "UserAssigned"),
                Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
            ))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("managementGroups/ContosoOnlineGroup")
            .scope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityArgs(
        type="UserAssigned",
        user_assigned_identities={
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
        },
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="managementGroups/ContosoOnlineGroup",
    scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "UserAssigned",
        userAssignedIdentities: {
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
        },
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "managementGroups/ContosoOnlineGroup",
    scope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: UserAssigned
        userAssignedIdentities:
          ? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
          : {}
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: managementGroups/ContosoOnlineGroup
      scope: subscriptions/00000000-0000-0000-0000-000000000000

Assignment with user-assigned managed identity at subscription scope

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var assignment = new AzureNative.Blueprint.Assignment("assignment", new()
    {
        AssignmentName = "assignSimpleBlueprint",
        BlueprintId = "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
        Description = "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
        Identity = new AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs
        {
            Type = "UserAssigned",
            UserAssignedIdentities = 
            {
                { "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity",  },
            },
        },
        Location = "eastus",
        Parameters = 
        {
            { "costCenter", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Contoso/Online/Shopping/Production",
            } },
            { "owners", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = new[]
                {
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com",
                },
            } },
            { "storageAccountType", new AzureNative.Blueprint.Inputs.ParameterValueArgs
            {
                Value = "Standard_LRS",
            } },
        },
        ResourceGroups = 
        {
            { "storageRG", new AzureNative.Blueprint.Inputs.ResourceGroupValueArgs
            {
                Location = "eastus",
                Name = "defaultRG",
            } },
        },
        ResourceScope = "subscriptions/00000000-0000-0000-0000-000000000000",
    });

});
package main

import (
	blueprint "github.com/pulumi/pulumi-azure-native/sdk/go/azure/blueprint"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := blueprint.NewAssignment(ctx, "assignment", &blueprint.AssignmentArgs{
			AssignmentName: pulumi.String("assignSimpleBlueprint"),
			BlueprintId:    pulumi.String("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint"),
			Description:    pulumi.String("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription."),
			Identity: &blueprint.ManagedServiceIdentityArgs{
				Type: pulumi.String("UserAssigned"),
				UserAssignedIdentities: blueprint.UserAssignedIdentityMap{
					"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": nil,
				},
			},
			Location: pulumi.String("eastus"),
			Parameters: blueprint.ParameterValueMap{
				"costCenter": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Contoso/Online/Shopping/Production"),
				},
				"owners": &blueprint.ParameterValueArgs{
					Value: pulumi.Any{
						"johnDoe@contoso.com",
						"johnsteam@contoso.com",
					},
				},
				"storageAccountType": &blueprint.ParameterValueArgs{
					Value: pulumi.Any("Standard_LRS"),
				},
			},
			ResourceGroups: blueprint.ResourceGroupValueMap{
				"storageRG": &blueprint.ResourceGroupValueArgs{
					Location: pulumi.String("eastus"),
					Name:     pulumi.String("defaultRG"),
				},
			},
			ResourceScope: pulumi.String("subscriptions/00000000-0000-0000-0000-000000000000"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.blueprint.Assignment;
import com.pulumi.azurenative.blueprint.AssignmentArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var assignment = new Assignment("assignment", AssignmentArgs.builder()        
            .assignmentName("assignSimpleBlueprint")
            .blueprintId("/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint")
            .description("enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.")
            .identity(Map.ofEntries(
                Map.entry("type", "UserAssigned"),
                Map.entry("userAssignedIdentities", Map.of("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity", ))
            ))
            .location("eastus")
            .parameters(Map.ofEntries(
                Map.entry("costCenter", Map.of("value", "Contoso/Online/Shopping/Production")),
                Map.entry("owners", Map.of("value",                 
                    "johnDoe@contoso.com",
                    "johnsteam@contoso.com")),
                Map.entry("storageAccountType", Map.of("value", "Standard_LRS"))
            ))
            .resourceGroups(Map.of("storageRG", Map.ofEntries(
                Map.entry("location", "eastus"),
                Map.entry("name", "defaultRG")
            )))
            .resourceScope("subscriptions/00000000-0000-0000-0000-000000000000")
            .build());

    }
}
import pulumi
import pulumi_azure_native as azure_native

assignment = azure_native.blueprint.Assignment("assignment",
    assignment_name="assignSimpleBlueprint",
    blueprint_id="/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description="enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity=azure_native.blueprint.ManagedServiceIdentityArgs(
        type="UserAssigned",
        user_assigned_identities={
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": azure_native.blueprint.UserAssignedIdentityArgs(),
        },
    ),
    location="eastus",
    parameters={
        "costCenter": azure_native.blueprint.ParameterValueArgs(
            value="Contoso/Online/Shopping/Production",
        ),
        "owners": azure_native.blueprint.ParameterValueArgs(
            value=[
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        ),
        "storageAccountType": azure_native.blueprint.ParameterValueArgs(
            value="Standard_LRS",
        ),
    },
    resource_groups={
        "storageRG": azure_native.blueprint.ResourceGroupValueArgs(
            location="eastus",
            name="defaultRG",
        ),
    },
    resource_scope="subscriptions/00000000-0000-0000-0000-000000000000")
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const assignment = new azure_native.blueprint.Assignment("assignment", {
    assignmentName: "assignSimpleBlueprint",
    blueprintId: "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint",
    description: "enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.",
    identity: {
        type: "UserAssigned",
        userAssignedIdentities: {
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity": {},
        },
    },
    location: "eastus",
    parameters: {
        costCenter: {
            value: "Contoso/Online/Shopping/Production",
        },
        owners: {
            value: [
                "johnDoe@contoso.com",
                "johnsteam@contoso.com",
            ],
        },
        storageAccountType: {
            value: "Standard_LRS",
        },
    },
    resourceGroups: {
        storageRG: {
            location: "eastus",
            name: "defaultRG",
        },
    },
    resourceScope: "subscriptions/00000000-0000-0000-0000-000000000000",
});
resources:
  assignment:
    type: azure-native:blueprint:Assignment
    properties:
      assignmentName: assignSimpleBlueprint
      blueprintId: /providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/providers/Microsoft.Blueprint/blueprints/simpleBlueprint
      description: enforce pre-defined simpleBlueprint to this XXXXXXXX subscription.
      identity:
        type: UserAssigned
        userAssignedIdentities:
          ? /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/contoso-resource-group/providers/Microsoft.ManagedIdentity/userAssignedIdentities/contoso-identity
          : {}
      location: eastus
      parameters:
        costCenter:
          value: Contoso/Online/Shopping/Production
        owners:
          value:
            - johnDoe@contoso.com
            - johnsteam@contoso.com
        storageAccountType:
          value: Standard_LRS
      resourceGroups:
        storageRG:
          location: eastus
          name: defaultRG
      resourceScope: subscriptions/00000000-0000-0000-0000-000000000000

Create a Assignment Resource

new Assignment(name: string, args: AssignmentArgs, opts?: CustomResourceOptions);
@overload
def Assignment(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               assignment_name: Optional[str] = None,
               blueprint_id: Optional[str] = None,
               description: Optional[str] = None,
               display_name: Optional[str] = None,
               identity: Optional[ManagedServiceIdentityArgs] = None,
               location: Optional[str] = None,
               locks: Optional[AssignmentLockSettingsArgs] = None,
               parameters: Optional[Mapping[str, ParameterValueArgs]] = None,
               resource_groups: Optional[Mapping[str, ResourceGroupValueArgs]] = None,
               resource_scope: Optional[str] = None,
               scope: Optional[str] = None)
@overload
def Assignment(resource_name: str,
               args: AssignmentArgs,
               opts: Optional[ResourceOptions] = None)
func NewAssignment(ctx *Context, name string, args AssignmentArgs, opts ...ResourceOption) (*Assignment, error)
public Assignment(string name, AssignmentArgs args, CustomResourceOptions? opts = null)
public Assignment(String name, AssignmentArgs args)
public Assignment(String name, AssignmentArgs args, CustomResourceOptions options)
type: azure-native:blueprint:Assignment
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

name string
The unique name of the resource.
args AssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args AssignmentArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args AssignmentArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args AssignmentArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args AssignmentArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Assignment Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Assignment resource accepts the following input properties:

Identity Pulumi.AzureNative.Blueprint.Inputs.ManagedServiceIdentityArgs

Managed identity for this blueprint assignment.

Parameters Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.ParameterValueArgs>

Blueprint assignment parameter values.

ResourceGroups Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.ResourceGroupValueArgs>

Names and locations of resource group placeholders.

ResourceScope string

The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

AssignmentName string

Name of the blueprint assignment.

BlueprintId string

ID of the published version of a blueprint definition.

Description string

Multi-line explain this resource.

DisplayName string

One-liner string explain this resource.

Location string

The location of this blueprint assignment.

Locks Pulumi.AzureNative.Blueprint.Inputs.AssignmentLockSettingsArgs

Defines how resources deployed by a blueprint assignment are locked.

Scope string

The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

Identity ManagedServiceIdentityArgs

Managed identity for this blueprint assignment.

Parameters map[string]ParameterValueArgs

Blueprint assignment parameter values.

ResourceGroups map[string]ResourceGroupValueArgs

Names and locations of resource group placeholders.

ResourceScope string

The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

AssignmentName string

Name of the blueprint assignment.

BlueprintId string

ID of the published version of a blueprint definition.

Description string

Multi-line explain this resource.

DisplayName string

One-liner string explain this resource.

Location string

The location of this blueprint assignment.

Locks AssignmentLockSettingsArgs

Defines how resources deployed by a blueprint assignment are locked.

Scope string

The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

identity ManagedServiceIdentityArgs

Managed identity for this blueprint assignment.

parameters Map<String,ParameterValueArgs>

Blueprint assignment parameter values.

resourceGroups Map<String,ResourceGroupValueArgs>

Names and locations of resource group placeholders.

resourceScope String

The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

assignmentName String

Name of the blueprint assignment.

blueprintId String

ID of the published version of a blueprint definition.

description String

Multi-line explain this resource.

displayName String

One-liner string explain this resource.

location String

The location of this blueprint assignment.

locks AssignmentLockSettingsArgs

Defines how resources deployed by a blueprint assignment are locked.

scope String

The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

identity ManagedServiceIdentityArgs

Managed identity for this blueprint assignment.

parameters {[key: string]: ParameterValueArgs}

Blueprint assignment parameter values.

resourceGroups {[key: string]: ResourceGroupValueArgs}

Names and locations of resource group placeholders.

resourceScope string

The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

assignmentName string

Name of the blueprint assignment.

blueprintId string

ID of the published version of a blueprint definition.

description string

Multi-line explain this resource.

displayName string

One-liner string explain this resource.

location string

The location of this blueprint assignment.

locks AssignmentLockSettingsArgs

Defines how resources deployed by a blueprint assignment are locked.

scope string

The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

identity ManagedServiceIdentityArgs

Managed identity for this blueprint assignment.

parameters Mapping[str, ParameterValueArgs]

Blueprint assignment parameter values.

resource_groups Mapping[str, ResourceGroupValueArgs]

Names and locations of resource group placeholders.

resource_scope str

The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

assignment_name str

Name of the blueprint assignment.

blueprint_id str

ID of the published version of a blueprint definition.

description str

Multi-line explain this resource.

display_name str

One-liner string explain this resource.

location str

The location of this blueprint assignment.

locks AssignmentLockSettingsArgs

Defines how resources deployed by a blueprint assignment are locked.

scope str

The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

identity Property Map

Managed identity for this blueprint assignment.

parameters Map<Property Map>

Blueprint assignment parameter values.

resourceGroups Map<Property Map>

Names and locations of resource group placeholders.

resourceScope String

The scope of the resource. Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}').

assignmentName String

Name of the blueprint assignment.

blueprintId String

ID of the published version of a blueprint definition.

description String

Multi-line explain this resource.

displayName String

One-liner string explain this resource.

location String

The location of this blueprint assignment.

locks Property Map

Defines how resources deployed by a blueprint assignment are locked.

scope String

The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required.

Outputs

All input properties are implicitly available as output properties. Additionally, the Assignment resource produces the following output properties:

Id string

The provider-assigned unique ID for this managed resource.

Name string

Name of this resource.

ProvisioningState string

State of the blueprint assignment.

Status Pulumi.AzureNative.Blueprint.Outputs.AssignmentStatusResponse

Status of blueprint assignment. This field is readonly.

Type string

Type of this resource.

Id string

The provider-assigned unique ID for this managed resource.

Name string

Name of this resource.

ProvisioningState string

State of the blueprint assignment.

Status AssignmentStatusResponse

Status of blueprint assignment. This field is readonly.

Type string

Type of this resource.

id String

The provider-assigned unique ID for this managed resource.

name String

Name of this resource.

provisioningState String

State of the blueprint assignment.

status AssignmentStatusResponse

Status of blueprint assignment. This field is readonly.

type String

Type of this resource.

id string

The provider-assigned unique ID for this managed resource.

name string

Name of this resource.

provisioningState string

State of the blueprint assignment.

status AssignmentStatusResponse

Status of blueprint assignment. This field is readonly.

type string

Type of this resource.

id str

The provider-assigned unique ID for this managed resource.

name str

Name of this resource.

provisioning_state str

State of the blueprint assignment.

status AssignmentStatusResponse

Status of blueprint assignment. This field is readonly.

type str

Type of this resource.

id String

The provider-assigned unique ID for this managed resource.

name String

Name of this resource.

provisioningState String

State of the blueprint assignment.

status Property Map

Status of blueprint assignment. This field is readonly.

type String

Type of this resource.

Supporting Types

AssignmentLockMode

None
None
AllResourcesReadOnly
AllResourcesReadOnly
AllResourcesDoNotDelete
AllResourcesDoNotDelete
AssignmentLockModeNone
None
AssignmentLockModeAllResourcesReadOnly
AllResourcesReadOnly
AssignmentLockModeAllResourcesDoNotDelete
AllResourcesDoNotDelete
None
None
AllResourcesReadOnly
AllResourcesReadOnly
AllResourcesDoNotDelete
AllResourcesDoNotDelete
None
None
AllResourcesReadOnly
AllResourcesReadOnly
AllResourcesDoNotDelete
AllResourcesDoNotDelete
NONE
None
ALL_RESOURCES_READ_ONLY
AllResourcesReadOnly
ALL_RESOURCES_DO_NOT_DELETE
AllResourcesDoNotDelete
"None"
None
"AllResourcesReadOnly"
AllResourcesReadOnly
"AllResourcesDoNotDelete"
AllResourcesDoNotDelete

AssignmentLockSettings

ExcludedActions List<string>

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

ExcludedPrincipals List<string>

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

Mode string | Pulumi.AzureNative.Blueprint.AssignmentLockMode

Lock mode.

ExcludedActions []string

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

ExcludedPrincipals []string

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

Mode string | AssignmentLockMode

Lock mode.

excludedActions List<String>

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excludedPrincipals List<String>

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode String | AssignmentLockMode

Lock mode.

excludedActions string[]

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excludedPrincipals string[]

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode string | AssignmentLockMode

Lock mode.

excluded_actions Sequence[str]

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excluded_principals Sequence[str]

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode str | AssignmentLockMode

Lock mode.

excludedActions List<String>

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excludedPrincipals List<String>

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode String | "None" | "AllResourcesReadOnly" | "AllResourcesDoNotDelete"

Lock mode.

AssignmentLockSettingsResponse

ExcludedActions List<string>

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

ExcludedPrincipals List<string>

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

Mode string

Lock mode.

ExcludedActions []string

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

ExcludedPrincipals []string

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

Mode string

Lock mode.

excludedActions List<String>

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excludedPrincipals List<String>

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode String

Lock mode.

excludedActions string[]

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excludedPrincipals string[]

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode string

Lock mode.

excluded_actions Sequence[str]

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excluded_principals Sequence[str]

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode str

Lock mode.

excludedActions List<String>

List of management operations that are excluded from blueprint locks. Up to 200 actions are permitted. If the lock mode is set to 'AllResourcesReadOnly', then the following actions are automatically appended to 'excludedActions': '*/read', 'Microsoft.Network/virtualNetworks/subnets/join/action' and 'Microsoft.Authorization/locks/delete'. If the lock mode is set to 'AllResourcesDoNotDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will get removed.

excludedPrincipals List<String>

List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.

mode String

Lock mode.

AssignmentStatusResponse

LastModified string

Last modified time of this blueprint definition.

ManagedResources List<string>

List of resources that were created by the blueprint assignment.

TimeCreated string

Creation time of this blueprint definition.

LastModified string

Last modified time of this blueprint definition.

ManagedResources []string

List of resources that were created by the blueprint assignment.

TimeCreated string

Creation time of this blueprint definition.

lastModified String

Last modified time of this blueprint definition.

managedResources List<String>

List of resources that were created by the blueprint assignment.

timeCreated String

Creation time of this blueprint definition.

lastModified string

Last modified time of this blueprint definition.

managedResources string[]

List of resources that were created by the blueprint assignment.

timeCreated string

Creation time of this blueprint definition.

last_modified str

Last modified time of this blueprint definition.

managed_resources Sequence[str]

List of resources that were created by the blueprint assignment.

time_created str

Creation time of this blueprint definition.

lastModified String

Last modified time of this blueprint definition.

managedResources List<String>

List of resources that were created by the blueprint assignment.

timeCreated String

Creation time of this blueprint definition.

KeyVaultReference

Id string

Azure resource ID of the Key Vault.

Id string

Azure resource ID of the Key Vault.

id String

Azure resource ID of the Key Vault.

id string

Azure resource ID of the Key Vault.

id str

Azure resource ID of the Key Vault.

id String

Azure resource ID of the Key Vault.

KeyVaultReferenceResponse

Id string

Azure resource ID of the Key Vault.

Id string

Azure resource ID of the Key Vault.

id String

Azure resource ID of the Key Vault.

id string

Azure resource ID of the Key Vault.

id str

Azure resource ID of the Key Vault.

id String

Azure resource ID of the Key Vault.

ManagedServiceIdentity

Type string | Pulumi.AzureNative.Blueprint.ManagedServiceIdentityType

Type of the managed identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

TenantId string

ID of the Azure Active Directory.

UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.UserAssignedIdentity>

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

Type string | ManagedServiceIdentityType

Type of the managed identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

TenantId string

ID of the Azure Active Directory.

UserAssignedIdentities map[string]UserAssignedIdentity

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type String | ManagedServiceIdentityType

Type of the managed identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

tenantId String

ID of the Azure Active Directory.

userAssignedIdentities Map<String,UserAssignedIdentity>

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type string | ManagedServiceIdentityType

Type of the managed identity.

principalId string

Azure Active Directory principal ID associated with this Identity.

tenantId string

ID of the Azure Active Directory.

userAssignedIdentities {[key: string]: UserAssignedIdentity}

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type str | ManagedServiceIdentityType

Type of the managed identity.

principal_id str

Azure Active Directory principal ID associated with this Identity.

tenant_id str

ID of the Azure Active Directory.

user_assigned_identities Mapping[str, UserAssignedIdentity]

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type String | "None" | "SystemAssigned" | "UserAssigned"

Type of the managed identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

tenantId String

ID of the Azure Active Directory.

userAssignedIdentities Map<Property Map>

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

ManagedServiceIdentityResponse

Type string

Type of the managed identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

TenantId string

ID of the Azure Active Directory.

UserAssignedIdentities Dictionary<string, Pulumi.AzureNative.Blueprint.Inputs.UserAssignedIdentityResponse>

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

Type string

Type of the managed identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

TenantId string

ID of the Azure Active Directory.

UserAssignedIdentities map[string]UserAssignedIdentityResponse

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type String

Type of the managed identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

tenantId String

ID of the Azure Active Directory.

userAssignedIdentities Map<String,UserAssignedIdentityResponse>

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type string

Type of the managed identity.

principalId string

Azure Active Directory principal ID associated with this Identity.

tenantId string

ID of the Azure Active Directory.

userAssignedIdentities {[key: string]: UserAssignedIdentityResponse}

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type str

Type of the managed identity.

principal_id str

Azure Active Directory principal ID associated with this Identity.

tenant_id str

ID of the Azure Active Directory.

user_assigned_identities Mapping[str, UserAssignedIdentityResponse]

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

type String

Type of the managed identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

tenantId String

ID of the Azure Active Directory.

userAssignedIdentities Map<Property Map>

The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.

ManagedServiceIdentityType

None
None
SystemAssigned
SystemAssigned
UserAssigned
UserAssigned
ManagedServiceIdentityTypeNone
None
ManagedServiceIdentityTypeSystemAssigned
SystemAssigned
ManagedServiceIdentityTypeUserAssigned
UserAssigned
None
None
SystemAssigned
SystemAssigned
UserAssigned
UserAssigned
None
None
SystemAssigned
SystemAssigned
UserAssigned
UserAssigned
NONE
None
SYSTEM_ASSIGNED
SystemAssigned
USER_ASSIGNED
UserAssigned
"None"
None
"SystemAssigned"
SystemAssigned
"UserAssigned"
UserAssigned

ParameterValue

Reference Pulumi.AzureNative.Blueprint.Inputs.SecretValueReference

Parameter value as reference type.

Value object

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

Reference SecretValueReference

Parameter value as reference type.

Value interface{}

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference SecretValueReference

Parameter value as reference type.

value Object

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference SecretValueReference

Parameter value as reference type.

value any

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference SecretValueReference

Parameter value as reference type.

value Any

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference Property Map

Parameter value as reference type.

value Any

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

ParameterValueResponse

Reference Pulumi.AzureNative.Blueprint.Inputs.SecretValueReferenceResponse

Parameter value as reference type.

Value object

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

Reference SecretValueReferenceResponse

Parameter value as reference type.

Value interface{}

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference SecretValueReferenceResponse

Parameter value as reference type.

value Object

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference SecretValueReferenceResponse

Parameter value as reference type.

value any

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference SecretValueReferenceResponse

Parameter value as reference type.

value Any

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

reference Property Map

Parameter value as reference type.

value Any

Parameter value. Any valid JSON value is allowed including objects, arrays, strings, numbers and booleans.

ResourceGroupValue

Location string

Location of the resource group.

Name string

Name of the resource group.

Location string

Location of the resource group.

Name string

Name of the resource group.

location String

Location of the resource group.

name String

Name of the resource group.

location string

Location of the resource group.

name string

Name of the resource group.

location str

Location of the resource group.

name str

Name of the resource group.

location String

Location of the resource group.

name String

Name of the resource group.

ResourceGroupValueResponse

Location string

Location of the resource group.

Name string

Name of the resource group.

Location string

Location of the resource group.

Name string

Name of the resource group.

location String

Location of the resource group.

name String

Name of the resource group.

location string

Location of the resource group.

name string

Name of the resource group.

location str

Location of the resource group.

name str

Name of the resource group.

location String

Location of the resource group.

name String

Name of the resource group.

SecretValueReference

KeyVault Pulumi.AzureNative.Blueprint.Inputs.KeyVaultReference

Specifies the reference to a given Azure Key Vault.

SecretName string

Name of the secret.

SecretVersion string

The version of the secret to use. If left blank, the latest version of the secret is used.

KeyVault KeyVaultReference

Specifies the reference to a given Azure Key Vault.

SecretName string

Name of the secret.

SecretVersion string

The version of the secret to use. If left blank, the latest version of the secret is used.

keyVault KeyVaultReference

Specifies the reference to a given Azure Key Vault.

secretName String

Name of the secret.

secretVersion String

The version of the secret to use. If left blank, the latest version of the secret is used.

keyVault KeyVaultReference

Specifies the reference to a given Azure Key Vault.

secretName string

Name of the secret.

secretVersion string

The version of the secret to use. If left blank, the latest version of the secret is used.

key_vault KeyVaultReference

Specifies the reference to a given Azure Key Vault.

secret_name str

Name of the secret.

secret_version str

The version of the secret to use. If left blank, the latest version of the secret is used.

keyVault Property Map

Specifies the reference to a given Azure Key Vault.

secretName String

Name of the secret.

secretVersion String

The version of the secret to use. If left blank, the latest version of the secret is used.

SecretValueReferenceResponse

KeyVault Pulumi.AzureNative.Blueprint.Inputs.KeyVaultReferenceResponse

Specifies the reference to a given Azure Key Vault.

SecretName string

Name of the secret.

SecretVersion string

The version of the secret to use. If left blank, the latest version of the secret is used.

KeyVault KeyVaultReferenceResponse

Specifies the reference to a given Azure Key Vault.

SecretName string

Name of the secret.

SecretVersion string

The version of the secret to use. If left blank, the latest version of the secret is used.

keyVault KeyVaultReferenceResponse

Specifies the reference to a given Azure Key Vault.

secretName String

Name of the secret.

secretVersion String

The version of the secret to use. If left blank, the latest version of the secret is used.

keyVault KeyVaultReferenceResponse

Specifies the reference to a given Azure Key Vault.

secretName string

Name of the secret.

secretVersion string

The version of the secret to use. If left blank, the latest version of the secret is used.

key_vault KeyVaultReferenceResponse

Specifies the reference to a given Azure Key Vault.

secret_name str

Name of the secret.

secret_version str

The version of the secret to use. If left blank, the latest version of the secret is used.

keyVault Property Map

Specifies the reference to a given Azure Key Vault.

secretName String

Name of the secret.

secretVersion String

The version of the secret to use. If left blank, the latest version of the secret is used.

UserAssignedIdentity

ClientId string

Client App Id associated with this identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

ClientId string

Client App Id associated with this identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

clientId String

Client App Id associated with this identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

clientId string

Client App Id associated with this identity.

principalId string

Azure Active Directory principal ID associated with this Identity.

client_id str

Client App Id associated with this identity.

principal_id str

Azure Active Directory principal ID associated with this Identity.

clientId String

Client App Id associated with this identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

UserAssignedIdentityResponse

ClientId string

Client App Id associated with this identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

ClientId string

Client App Id associated with this identity.

PrincipalId string

Azure Active Directory principal ID associated with this Identity.

clientId String

Client App Id associated with this identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

clientId string

Client App Id associated with this identity.

principalId string

Azure Active Directory principal ID associated with this Identity.

client_id str

Client App Id associated with this identity.

principal_id str

Azure Active Directory principal ID associated with this Identity.

clientId String

Client App Id associated with this identity.

principalId String

Azure Active Directory principal ID associated with this Identity.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:blueprint:Assignment assignSimpleBlueprint /subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Blueprint/blueprintAssignments/assignSimpleBlueprint 

Package Details

Repository
https://github.com/pulumi/pulumi-azure-native
License
Apache-2.0