Docs
PackagesWe recommend using Azure Native.
azure.role.Definition
Explore with Pulumi AI
Deprecated:
azure.role.Definition has been deprecated in favor of azure.authorization.RoleDefinition
Manages a custom Role Definition, used to assign Roles to Users/Principals. See ‘Understand role definitions’ in the Azure documentation for more details.
Example Usage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Azure = Pulumi.Azure;
return await Deployment.RunAsync(() =>
{
var primary = Azure.Core.GetSubscription.Invoke();
var example = new Azure.Authorization.RoleDefinition("example", new()
{
Scope = primary.Apply(getSubscriptionResult => getSubscriptionResult.Id),
Description = "This is a custom role created",
Permissions = new[]
{
new Azure.Authorization.Inputs.RoleDefinitionPermissionArgs
{
Actions = new[]
{
"*",
},
NotActions = new[] {},
},
},
AssignableScopes = new[]
{
primary.Apply(getSubscriptionResult => getSubscriptionResult.Id),
},
});
});
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/authorization"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
primary, err := core.LookupSubscription(ctx, nil, nil)
if err != nil {
return err
}
_, err = authorization.NewRoleDefinition(ctx, "example", &authorization.RoleDefinitionArgs{
Scope: *pulumi.String(primary.Id),
Description: pulumi.String("This is a custom role created"),
Permissions: authorization.RoleDefinitionPermissionArray{
&authorization.RoleDefinitionPermissionArgs{
Actions: pulumi.StringArray{
pulumi.String("*"),
},
NotActions: pulumi.StringArray{},
},
},
AssignableScopes: pulumi.StringArray{
*pulumi.String(primary.Id),
},
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azure.core.CoreFunctions;
import com.pulumi.azure.core.inputs.GetSubscriptionArgs;
import com.pulumi.azure.authorization.RoleDefinition;
import com.pulumi.azure.authorization.RoleDefinitionArgs;
import com.pulumi.azure.authorization.inputs.RoleDefinitionPermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var primary = CoreFunctions.getSubscription();
var example = new RoleDefinition("example", RoleDefinitionArgs.builder()
.scope(primary.applyValue(getSubscriptionResult -> getSubscriptionResult.id()))
.description("This is a custom role created")
.permissions(RoleDefinitionPermissionArgs.builder()
.actions("*")
.notActions()
.build())
.assignableScopes(primary.applyValue(getSubscriptionResult -> getSubscriptionResult.id()))
.build());
}
}
import pulumi
import pulumi_azure as azure
primary = azure.core.get_subscription()
example = azure.authorization.RoleDefinition("example",
scope=primary.id,
description="This is a custom role created",
permissions=[azure.authorization.RoleDefinitionPermissionArgs(
actions=["*"],
not_actions=[],
)],
assignable_scopes=[primary.id])
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const primary = azure.core.getSubscription({});
const example = new azure.authorization.RoleDefinition("example", {
scope: primary.then(primary => primary.id),
description: "This is a custom role created",
permissions: [{
actions: ["*"],
notActions: [],
}],
assignableScopes: [primary.then(primary => primary.id)],
});
resources:
example:
type: azure:authorization:RoleDefinition
properties:
scope: ${primary.id}
description: This is a custom role created
permissions:
- actions:
- '*'
notActions: []
assignableScopes:
- ${primary.id}
variables:
primary:
fn::invoke:
Function: azure:core:getSubscription
Arguments: {}
Create Definition Resource
new Definition(name: string, args: DefinitionArgs, opts?: CustomResourceOptions);@overload
def Definition(resource_name: str,
opts: Optional[ResourceOptions] = None,
assignable_scopes: Optional[Sequence[str]] = None,
description: Optional[str] = None,
name: Optional[str] = None,
permissions: Optional[Sequence[DefinitionPermissionArgs]] = None,
role_definition_id: Optional[str] = None,
scope: Optional[str] = None)
@overload
def Definition(resource_name: str,
args: DefinitionArgs,
opts: Optional[ResourceOptions] = None)func NewDefinition(ctx *Context, name string, args DefinitionArgs, opts ...ResourceOption) (*Definition, error)public Definition(string name, DefinitionArgs args, CustomResourceOptions? opts = null)
public Definition(String name, DefinitionArgs args)
public Definition(String name, DefinitionArgs args, CustomResourceOptions options)
type: azure:role:Definition
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DefinitionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args DefinitionArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args DefinitionArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args DefinitionArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args DefinitionArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Definition Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The Definition resource accepts the following input properties:
- Scope string
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.- Assignable
Scopes List<string> One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- Description string
A description of the Role Definition.
- Name string
The name of the Role Definition.
- Permissions
List<Definition
Permission> A
permissionsblock as defined below.- Role
Definition stringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- Scope string
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.- Assignable
Scopes []string One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- Description string
A description of the Role Definition.
- Name string
The name of the Role Definition.
- Permissions
[]Definition
Permission Args A
permissionsblock as defined below.- Role
Definition stringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- scope String
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.- assignable
Scopes List<String> One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description String
A description of the Role Definition.
- name String
The name of the Role Definition.
- permissions
List<Definition
Permission> A
permissionsblock as defined below.- role
Definition StringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- scope string
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.- assignable
Scopes string[] One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description string
A description of the Role Definition.
- name string
The name of the Role Definition.
- permissions
Definition
Permission[] A
permissionsblock as defined below.- role
Definition stringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- scope str
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.- assignable_
scopes Sequence[str] One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description str
A description of the Role Definition.
- name str
The name of the Role Definition.
- permissions
Sequence[Definition
Permission Args] A
permissionsblock as defined below.- role_
definition_ strid A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- scope String
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.- assignable
Scopes List<String> One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description String
A description of the Role Definition.
- name String
The name of the Role Definition.
- permissions List<Property Map>
A
permissionsblock as defined below.- role
Definition StringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
Outputs
All input properties are implicitly available as output properties. Additionally, the Definition resource produces the following output properties:
- Id string
The provider-assigned unique ID for this managed resource.
- Role
Definition stringResource Id The Azure Resource Manager ID for the resource.
- Id string
The provider-assigned unique ID for this managed resource.
- Role
Definition stringResource Id The Azure Resource Manager ID for the resource.
- id String
The provider-assigned unique ID for this managed resource.
- role
Definition StringResource Id The Azure Resource Manager ID for the resource.
- id string
The provider-assigned unique ID for this managed resource.
- role
Definition stringResource Id The Azure Resource Manager ID for the resource.
- id str
The provider-assigned unique ID for this managed resource.
- role_
definition_ strresource_ id The Azure Resource Manager ID for the resource.
- id String
The provider-assigned unique ID for this managed resource.
- role
Definition StringResource Id The Azure Resource Manager ID for the resource.
Look up Existing Definition Resource
Get an existing Definition resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: DefinitionState, opts?: CustomResourceOptions): Definition@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
assignable_scopes: Optional[Sequence[str]] = None,
description: Optional[str] = None,
name: Optional[str] = None,
permissions: Optional[Sequence[DefinitionPermissionArgs]] = None,
role_definition_id: Optional[str] = None,
role_definition_resource_id: Optional[str] = None,
scope: Optional[str] = None) -> Definitionfunc GetDefinition(ctx *Context, name string, id IDInput, state *DefinitionState, opts ...ResourceOption) (*Definition, error)public static Definition Get(string name, Input<string> id, DefinitionState? state, CustomResourceOptions? opts = null)public static Definition get(String name, Output<String> id, DefinitionState state, CustomResourceOptions options)Resource lookup is not supported in YAML- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Assignable
Scopes List<string> One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- Description string
A description of the Role Definition.
- Name string
The name of the Role Definition.
- Permissions
List<Definition
Permission> A
permissionsblock as defined below.- Role
Definition stringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- Role
Definition stringResource Id The Azure Resource Manager ID for the resource.
- Scope string
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.
- Assignable
Scopes []string One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- Description string
A description of the Role Definition.
- Name string
The name of the Role Definition.
- Permissions
[]Definition
Permission Args A
permissionsblock as defined below.- Role
Definition stringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- Role
Definition stringResource Id The Azure Resource Manager ID for the resource.
- Scope string
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.
- assignable
Scopes List<String> One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description String
A description of the Role Definition.
- name String
The name of the Role Definition.
- permissions
List<Definition
Permission> A
permissionsblock as defined below.- role
Definition StringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- role
Definition StringResource Id The Azure Resource Manager ID for the resource.
- scope String
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.
- assignable
Scopes string[] One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description string
A description of the Role Definition.
- name string
The name of the Role Definition.
- permissions
Definition
Permission[] A
permissionsblock as defined below.- role
Definition stringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- role
Definition stringResource Id The Azure Resource Manager ID for the resource.
- scope string
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.
- assignable_
scopes Sequence[str] One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description str
A description of the Role Definition.
- name str
The name of the Role Definition.
- permissions
Sequence[Definition
Permission Args] A
permissionsblock as defined below.- role_
definition_ strid A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- role_
definition_ strresource_ id The Azure Resource Manager ID for the resource.
- scope str
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.
- assignable
Scopes List<String> One or more assignable scopes for this Role Definition, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM.NOTE: The value for
scopeis automatically included in this list if no other values supplied.- description String
A description of the Role Definition.
- name String
The name of the Role Definition.
- permissions List<Property Map>
A
permissionsblock as defined below.- role
Definition StringId A unique UUID/GUID which identifies this role - one will be generated if not specified. Changing this forces a new resource to be created.
- role
Definition StringResource Id The Azure Resource Manager ID for the resource.
- scope String
The scope at which the Role Definition applies to, such as
/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333,/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup, or/subscriptions/0b1f6471-1bf0-4dda-aec3-111122223333/resourceGroups/myGroup/providers/Microsoft.Compute/virtualMachines/myVM. It is recommended to use the first entry of theassignable_scopes. Changing this forces a new resource to be created.
Supporting Types
DefinitionPermission, DefinitionPermissionArgs
- Actions List<string>
One or more Allowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- Data
Actions List<string> One or more Allowed Data Actions, such as
*,Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read. See 'Azure Resource Manager resource provider operations' for details.- Not
Actions List<string> One or more Disallowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- Not
Data List<string>Actions One or more Disallowed Data Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.
- Actions []string
One or more Allowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- Data
Actions []string One or more Allowed Data Actions, such as
*,Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read. See 'Azure Resource Manager resource provider operations' for details.- Not
Actions []string One or more Disallowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- Not
Data []stringActions One or more Disallowed Data Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.
- actions List<String>
One or more Allowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- data
Actions List<String> One or more Allowed Data Actions, such as
*,Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read. See 'Azure Resource Manager resource provider operations' for details.- not
Actions List<String> One or more Disallowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- not
Data List<String>Actions One or more Disallowed Data Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.
- actions string[]
One or more Allowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- data
Actions string[] One or more Allowed Data Actions, such as
*,Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read. See 'Azure Resource Manager resource provider operations' for details.- not
Actions string[] One or more Disallowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- not
Data string[]Actions One or more Disallowed Data Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.
- actions Sequence[str]
One or more Allowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- data_
actions Sequence[str] One or more Allowed Data Actions, such as
*,Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read. See 'Azure Resource Manager resource provider operations' for details.- not_
actions Sequence[str] One or more Disallowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- not_
data_ Sequence[str]actions One or more Disallowed Data Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.
- actions List<String>
One or more Allowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- data
Actions List<String> One or more Allowed Data Actions, such as
*,Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read. See 'Azure Resource Manager resource provider operations' for details.- not
Actions List<String> One or more Disallowed Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.- not
Data List<String>Actions One or more Disallowed Data Actions, such as
*,Microsoft.Resources/subscriptions/resourceGroups/read. See 'Azure Resource Manager resource provider operations' for details.
Import
Role Definitions can be imported using the resource id, e.g.
$ pulumi import azure:role/definition:Definition example "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/roleDefinitions/00000000-0000-0000-0000-000000000000|/subscriptions/00000000-0000-0000-0000-000000000000"
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
This Pulumi package is based on the
azurermTerraform Provider.