We recommend using Azure Native.
published on Monday, Mar 9, 2026 by Pulumi
We recommend using Azure Native.
published on Monday, Mar 9, 2026 by Pulumi
Manages an Authorization Rule for a ServiceBus Queue.
Example Usage
using Pulumi;
using Azure = Pulumi.Azure;
class MyStack : Stack
{
public MyStack()
{
var exampleResourceGroup = new Azure.Core.ResourceGroup("exampleResourceGroup", new Azure.Core.ResourceGroupArgs
{
Location = "West US",
});
var exampleNamespace = new Azure.ServiceBus.Namespace("exampleNamespace", new Azure.ServiceBus.NamespaceArgs
{
Location = exampleResourceGroup.Location,
ResourceGroupName = exampleResourceGroup.Name,
Sku = "Standard",
Tags =
{
{ "source", "example" },
},
});
var exampleQueue = new Azure.ServiceBus.Queue("exampleQueue", new Azure.ServiceBus.QueueArgs
{
NamespaceId = exampleNamespace.Id,
EnablePartitioning = true,
});
var exampleQueueAuthorizationRule = new Azure.ServiceBus.QueueAuthorizationRule("exampleQueueAuthorizationRule", new Azure.ServiceBus.QueueAuthorizationRuleArgs
{
QueueId = exampleQueue.Id,
Listen = true,
Send = true,
Manage = false,
});
}
}
package main
import (
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v4/go/azure/servicebus"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
Location: pulumi.String("West US"),
})
if err != nil {
return err
}
exampleNamespace, err := servicebus.NewNamespace(ctx, "exampleNamespace", &servicebus.NamespaceArgs{
Location: exampleResourceGroup.Location,
ResourceGroupName: exampleResourceGroup.Name,
Sku: pulumi.String("Standard"),
Tags: pulumi.StringMap{
"source": pulumi.String("example"),
},
})
if err != nil {
return err
}
exampleQueue, err := servicebus.NewQueue(ctx, "exampleQueue", &servicebus.QueueArgs{
NamespaceId: exampleNamespace.ID(),
EnablePartitioning: pulumi.Bool(true),
})
if err != nil {
return err
}
_, err = servicebus.NewQueueAuthorizationRule(ctx, "exampleQueueAuthorizationRule", &servicebus.QueueAuthorizationRuleArgs{
QueueId: exampleQueue.ID(),
Listen: pulumi.Bool(true),
Send: pulumi.Bool(true),
Manage: pulumi.Bool(false),
})
if err != nil {
return err
}
return nil
})
}
Example coming soon!
import * as pulumi from "@pulumi/pulumi";
import * as azure from "@pulumi/azure";
const exampleResourceGroup = new azure.core.ResourceGroup("exampleResourceGroup", {location: "West US"});
const exampleNamespace = new azure.servicebus.Namespace("exampleNamespace", {
location: exampleResourceGroup.location,
resourceGroupName: exampleResourceGroup.name,
sku: "Standard",
tags: {
source: "example",
},
});
const exampleQueue = new azure.servicebus.Queue("exampleQueue", {
namespaceId: exampleNamespace.id,
enablePartitioning: true,
});
const exampleQueueAuthorizationRule = new azure.servicebus.QueueAuthorizationRule("exampleQueueAuthorizationRule", {
queueId: exampleQueue.id,
listen: true,
send: true,
manage: false,
});
import pulumi
import pulumi_azure as azure
example_resource_group = azure.core.ResourceGroup("exampleResourceGroup", location="West US")
example_namespace = azure.servicebus.Namespace("exampleNamespace",
location=example_resource_group.location,
resource_group_name=example_resource_group.name,
sku="Standard",
tags={
"source": "example",
})
example_queue = azure.servicebus.Queue("exampleQueue",
namespace_id=example_namespace.id,
enable_partitioning=True)
example_queue_authorization_rule = azure.servicebus.QueueAuthorizationRule("exampleQueueAuthorizationRule",
queue_id=example_queue.id,
listen=True,
send=True,
manage=False)
Example coming soon!
Create QueueAuthorizationRule Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new QueueAuthorizationRule(name: string, args?: QueueAuthorizationRuleArgs, opts?: CustomResourceOptions);@overload
def QueueAuthorizationRule(resource_name: str,
args: Optional[QueueAuthorizationRuleArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def QueueAuthorizationRule(resource_name: str,
opts: Optional[ResourceOptions] = None,
listen: Optional[bool] = None,
manage: Optional[bool] = None,
name: Optional[str] = None,
namespace_name: Optional[str] = None,
queue_id: Optional[str] = None,
queue_name: Optional[str] = None,
resource_group_name: Optional[str] = None,
send: Optional[bool] = None)func NewQueueAuthorizationRule(ctx *Context, name string, args *QueueAuthorizationRuleArgs, opts ...ResourceOption) (*QueueAuthorizationRule, error)public QueueAuthorizationRule(string name, QueueAuthorizationRuleArgs? args = null, CustomResourceOptions? opts = null)
public QueueAuthorizationRule(String name, QueueAuthorizationRuleArgs args)
public QueueAuthorizationRule(String name, QueueAuthorizationRuleArgs args, CustomResourceOptions options)
type: azure:eventhub:QueueAuthorizationRule
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args QueueAuthorizationRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args QueueAuthorizationRuleArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args QueueAuthorizationRuleArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args QueueAuthorizationRuleArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args QueueAuthorizationRuleArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
QueueAuthorizationRule Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The QueueAuthorizationRule resource accepts the following input properties:
- Listen bool
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - Manage bool
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - Name string
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- Namespace
Name string - Queue
Id string - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- Queue
Name string - Resource
Group stringName - Send bool
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- Listen bool
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - Manage bool
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - Name string
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- Namespace
Name string - Queue
Id string - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- Queue
Name string - Resource
Group stringName - Send bool
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen Boolean
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage Boolean
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name String
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace
Name String - queue
Id String - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue
Name String - resource
Group StringName - send Boolean
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen boolean
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage boolean
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name string
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace
Name string - queue
Id string - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue
Name string - resource
Group stringName - send boolean
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen bool
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage bool
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name str
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace_
name str - queue_
id str - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue_
name str - resource_
group_ strname - send bool
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen Boolean
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage Boolean
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name String
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace
Name String - queue
Id String - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue
Name String - resource
Group StringName - send Boolean
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
Outputs
All input properties are implicitly available as output properties. Additionally, the QueueAuthorizationRule resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Primary
Connection stringString - The Primary Connection String for the Authorization Rule.
- Primary
Connection stringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- Primary
Key string - The Primary Key for the Authorization Rule.
- Secondary
Connection stringString - The Secondary Connection String for the Authorization Rule.
- Secondary
Connection stringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- Secondary
Key string - The Secondary Key for the Authorization Rule.
- Id string
- The provider-assigned unique ID for this managed resource.
- Primary
Connection stringString - The Primary Connection String for the Authorization Rule.
- Primary
Connection stringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- Primary
Key string - The Primary Key for the Authorization Rule.
- Secondary
Connection stringString - The Secondary Connection String for the Authorization Rule.
- Secondary
Connection stringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- Secondary
Key string - The Secondary Key for the Authorization Rule.
- id String
- The provider-assigned unique ID for this managed resource.
- primary
Connection StringString - The Primary Connection String for the Authorization Rule.
- primary
Connection StringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary
Key String - The Primary Key for the Authorization Rule.
- secondary
Connection StringString - The Secondary Connection String for the Authorization Rule.
- secondary
Connection StringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary
Key String - The Secondary Key for the Authorization Rule.
- id string
- The provider-assigned unique ID for this managed resource.
- primary
Connection stringString - The Primary Connection String for the Authorization Rule.
- primary
Connection stringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary
Key string - The Primary Key for the Authorization Rule.
- secondary
Connection stringString - The Secondary Connection String for the Authorization Rule.
- secondary
Connection stringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary
Key string - The Secondary Key for the Authorization Rule.
- id str
- The provider-assigned unique ID for this managed resource.
- primary_
connection_ strstring - The Primary Connection String for the Authorization Rule.
- primary_
connection_ strstring_ alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary_
key str - The Primary Key for the Authorization Rule.
- secondary_
connection_ strstring - The Secondary Connection String for the Authorization Rule.
- secondary_
connection_ strstring_ alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary_
key str - The Secondary Key for the Authorization Rule.
- id String
- The provider-assigned unique ID for this managed resource.
- primary
Connection StringString - The Primary Connection String for the Authorization Rule.
- primary
Connection StringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary
Key String - The Primary Key for the Authorization Rule.
- secondary
Connection StringString - The Secondary Connection String for the Authorization Rule.
- secondary
Connection StringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary
Key String - The Secondary Key for the Authorization Rule.
Look up Existing QueueAuthorizationRule Resource
Get an existing QueueAuthorizationRule resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: QueueAuthorizationRuleState, opts?: CustomResourceOptions): QueueAuthorizationRule@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
listen: Optional[bool] = None,
manage: Optional[bool] = None,
name: Optional[str] = None,
namespace_name: Optional[str] = None,
primary_connection_string: Optional[str] = None,
primary_connection_string_alias: Optional[str] = None,
primary_key: Optional[str] = None,
queue_id: Optional[str] = None,
queue_name: Optional[str] = None,
resource_group_name: Optional[str] = None,
secondary_connection_string: Optional[str] = None,
secondary_connection_string_alias: Optional[str] = None,
secondary_key: Optional[str] = None,
send: Optional[bool] = None) -> QueueAuthorizationRulefunc GetQueueAuthorizationRule(ctx *Context, name string, id IDInput, state *QueueAuthorizationRuleState, opts ...ResourceOption) (*QueueAuthorizationRule, error)public static QueueAuthorizationRule Get(string name, Input<string> id, QueueAuthorizationRuleState? state, CustomResourceOptions? opts = null)public static QueueAuthorizationRule get(String name, Output<String> id, QueueAuthorizationRuleState state, CustomResourceOptions options)resources: _: type: azure:eventhub:QueueAuthorizationRule get: id: ${id}- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Listen bool
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - Manage bool
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - Name string
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- Namespace
Name string - Primary
Connection stringString - The Primary Connection String for the Authorization Rule.
- Primary
Connection stringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- Primary
Key string - The Primary Key for the Authorization Rule.
- Queue
Id string - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- Queue
Name string - Resource
Group stringName - Secondary
Connection stringString - The Secondary Connection String for the Authorization Rule.
- Secondary
Connection stringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- Secondary
Key string - The Secondary Key for the Authorization Rule.
- Send bool
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- Listen bool
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - Manage bool
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - Name string
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- Namespace
Name string - Primary
Connection stringString - The Primary Connection String for the Authorization Rule.
- Primary
Connection stringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- Primary
Key string - The Primary Key for the Authorization Rule.
- Queue
Id string - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- Queue
Name string - Resource
Group stringName - Secondary
Connection stringString - The Secondary Connection String for the Authorization Rule.
- Secondary
Connection stringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- Secondary
Key string - The Secondary Key for the Authorization Rule.
- Send bool
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen Boolean
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage Boolean
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name String
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace
Name String - primary
Connection StringString - The Primary Connection String for the Authorization Rule.
- primary
Connection StringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary
Key String - The Primary Key for the Authorization Rule.
- queue
Id String - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue
Name String - resource
Group StringName - secondary
Connection StringString - The Secondary Connection String for the Authorization Rule.
- secondary
Connection StringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary
Key String - The Secondary Key for the Authorization Rule.
- send Boolean
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen boolean
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage boolean
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name string
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace
Name string - primary
Connection stringString - The Primary Connection String for the Authorization Rule.
- primary
Connection stringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary
Key string - The Primary Key for the Authorization Rule.
- queue
Id string - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue
Name string - resource
Group stringName - secondary
Connection stringString - The Secondary Connection String for the Authorization Rule.
- secondary
Connection stringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary
Key string - The Secondary Key for the Authorization Rule.
- send boolean
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen bool
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage bool
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name str
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace_
name str - primary_
connection_ strstring - The Primary Connection String for the Authorization Rule.
- primary_
connection_ strstring_ alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary_
key str - The Primary Key for the Authorization Rule.
- queue_
id str - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue_
name str - resource_
group_ strname - secondary_
connection_ strstring - The Secondary Connection String for the Authorization Rule.
- secondary_
connection_ strstring_ alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary_
key str - The Secondary Key for the Authorization Rule.
- send bool
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
- listen Boolean
- Does this Authorization Rule have Listen permissions to the ServiceBus Queue? Defaults to
false. - manage Boolean
- Does this Authorization Rule have Manage permissions to the ServiceBus Queue? When this property is
true- bothlistenandsendmust be too. Defaults tofalse. - name String
- Specifies the name of the Authorization Rule. Changing this forces a new resource to be created.
- namespace
Name String - primary
Connection StringString - The Primary Connection String for the Authorization Rule.
- primary
Connection StringString Alias - The alias Primary Connection String for the ServiceBus Namespace, if the namespace is Geo DR paired.
- primary
Key String - The Primary Key for the Authorization Rule.
- queue
Id String - Specifies the ID of the ServiceBus Queue. Changing this forces a new resource to be created.
- queue
Name String - resource
Group StringName - secondary
Connection StringString - The Secondary Connection String for the Authorization Rule.
- secondary
Connection StringString Alias - The alias Secondary Connection String for the ServiceBus Namespace
- secondary
Key String - The Secondary Key for the Authorization Rule.
- send Boolean
- Does this Authorization Rule have Send permissions to the ServiceBus Queue? Defaults to
false.
Import
ServiceBus Queue Authorization Rules can be imported using the resource id, e.g.
$ pulumi import azure:eventhub/queueAuthorizationRule:QueueAuthorizationRule rule1 /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.ServiceBus/namespaces/namespace1/queues/queue1/authorizationRules/rule1
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Classic pulumi/pulumi-azure
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
azurermTerraform Provider.
We recommend using Azure Native.
published on Monday, Mar 9, 2026 by Pulumi
