role_management_policy_assignments

Creates, updates, deletes, gets or lists a role_management_policy_assignments resource.

Overview

Name	role_management_policy_assignments
Type	Resource
Id	azure.authorization.role_management_policy_assignments

Fields

vw_role_management_policy_assignments

Name	Datatype	Description
id	text	The role management policy Id.
name	text	The role management policy name.
effective_rules	text	field from the properties object
policy_assignment_properties	text	field from the properties object
policy_id	text	field from the properties object
roleManagementPolicyAssignmentName	text	field from the properties object
role_definition_id	text	field from the properties object
scope	text	field from the properties object
type	text	The role management policy type.

role_management_policy_assignments

Name	Datatype	Description
id	string	The role management policy Id.
name	string	The role management policy name.
properties	object	Role management policy assignment properties with scope.
type	string	The role management policy type.

Methods

Name	Accessible by	Required Params	Description
get	SELECT	roleManagementPolicyAssignmentName, scope	Get the specified role management policy assignment for a resource scope
list_for_scope	SELECT	scope	Gets role management assignment policies for a resource scope.
create	INSERT	roleManagementPolicyAssignmentName, scope	Create a role management policy assignment
delete	DELETE	roleManagementPolicyAssignmentName, scope	Delete a role management policy assignment

SELECT examples

Gets role management assignment policies for a resource scope.

vw_role_management_policy_assignments

SELECT
id,
name,
effective_rules,
policy_assignment_properties,
policy_id,
roleManagementPolicyAssignmentName,
role_definition_id,
scope,
type
FROM azure.authorization.vw_role_management_policy_assignments
WHERE scope = '{{ scope }}';

role_management_policy_assignments

SELECT
id,
name,
properties,
type
FROM azure.authorization.role_management_policy_assignments
WHERE scope = '{{ scope }}';

INSERT example

Use the following StackQL query and manifest file to create a new role_management_policy_assignments resource.

All Properties

/*+ create */
INSERT INTO azure.authorization.role_management_policy_assignments (
roleManagementPolicyAssignmentName,
scope,
properties
)
SELECT 
'{{ roleManagementPolicyAssignmentName }}',
'{{ scope }}',
'{{ properties }}'
;

Manifest

- name: your_resource_model_name
  props:
    - name: id
      value: string
    - name: name
      value: string
    - name: type
      value: string
    - name: properties
      value:
        - name: scope
          value: string
        - name: roleDefinitionId
          value: string
        - name: policyId
          value: string
        - name: effectiveRules
          value:
            - - name: id
                value: string
              - name: ruleType
                value: []
              - name: target
                value:
                  - name: caller
                    value: string
                  - name: operations
                    value:
                      - string
                  - name: level
                    value: string
                  - name: targetObjects
                    value:
                      - string
                  - name: inheritableSettings
                    value:
                      - string
                  - name: enforcedSettings
                    value:
                      - string
        - name: policyAssignmentProperties
          value:
            - name: scope
              value:
                - name: id
                  value: string
                - name: displayName
                  value: string
                - name: type
                  value: string
            - name: roleDefinition
              value:
                - name: id
                  value: string
                - name: displayName
                  value: string
                - name: type
                  value: string
            - name: policy
              value:
                - name: id
                  value: string
                - name: lastModifiedBy
                  value:
                    - name: id
                      value: string
                    - name: displayName
                      value: string
                    - name: type
                      value: string
                    - name: email
                      value: string
                - name: lastModifiedDateTime
                  value: string

DELETE example

Deletes the specified role_management_policy_assignments resource.

/*+ delete */
DELETE FROM azure.authorization.role_management_policy_assignments
WHERE roleManagementPolicyAssignmentName = '{{ roleManagementPolicyAssignmentName }}'
AND scope = '{{ scope }}';