role_management_policies

Creates, updates, deletes, gets or lists a role_management_policies resource.

Overview

Name	role_management_policies
Type	Resource
Id	azure.authorization.role_management_policies

Fields

The following fields are returned by SELECT queries:

get

Name	Datatype	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
name	string	The name of the resource.
description	string	The role management policy description.
displayName	string	The role management policy display name.
effectiveRules	array	The readonly computed rule applied to the policy.
isOrganizationDefault	boolean	The role management policy is default policy.
lastModifiedBy	object	The name of the entity last modified it.
lastModifiedDateTime	string (date-time)	The last modified date time.
policyProperties	object	Additional properties of scope.
rules	array	The rule applied to the policy.
scope	string	The role management policy scope.
systemData	object	Azure Resource Manager metadata containing createdBy and modifiedBy information.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

list_for_scope

Name	Datatype	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
name	string	The name of the resource.
description	string	The role management policy description.
displayName	string	The role management policy display name.
effectiveRules	array	The readonly computed rule applied to the policy.
isOrganizationDefault	boolean	The role management policy is default policy.
lastModifiedBy	object	The name of the entity last modified it.
lastModifiedDateTime	string (date-time)	The last modified date time.
policyProperties	object	Additional properties of scope.
rules	array	The rule applied to the policy.
scope	string	The role management policy scope.
systemData	object	Azure Resource Manager metadata containing createdBy and modifiedBy information.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	scope, role_management_policy_name		Get the specified role management policy for a resource scope.
list_for_scope	select	scope		Gets role management policies for a resource scope.
update	update	scope, role_management_policy_name		Update a role management policy.
delete	delete	scope, role_management_policy_name		Delete a role management policy.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
role_management_policy_name	string	The name (guid) of the role management policy to get. Required.
scope	string	The fully qualified Azure Resource manager identifier of the resource. Required.

SELECT examples

get

Get the specified role management policy for a resource scope.

SELECT
id,
name,
description,
displayName,
effectiveRules,
isOrganizationDefault,
lastModifiedBy,
lastModifiedDateTime,
policyProperties,
rules,
scope,
systemData,
type
FROM azure.authorization.role_management_policies
WHERE scope = '{{ scope }}' -- required
AND role_management_policy_name = '{{ role_management_policy_name }}' -- required
;

list_for_scope

Gets role management policies for a resource scope.

SELECT
id,
name,
description,
displayName,
effectiveRules,
isOrganizationDefault,
lastModifiedBy,
lastModifiedDateTime,
policyProperties,
rules,
scope,
systemData,
type
FROM azure.authorization.role_management_policies
WHERE scope = '{{ scope }}' -- required
;

UPDATE examples

update

Update a role management policy.

UPDATE azure.authorization.role_management_policies
SET 
properties = '{{ properties }}'
WHERE 
scope = '{{ scope }}' --required
AND role_management_policy_name = '{{ role_management_policy_name }}' --required
RETURNING
id,
name,
properties,
systemData,
type;

DELETE examples

delete

Delete a role management policy.

DELETE FROM azure.authorization.role_management_policies
WHERE scope = '{{ scope }}' --required
AND role_management_policy_name = '{{ role_management_policy_name }}' --required
;