scope_access_review_instance_decisions

Creates, updates, deletes, gets or lists a scope_access_review_instance_decisions resource.

Overview

Name	scope_access_review_instance_decisions
Type	Resource
Id	azure.authorization.scope_access_review_instance_decisions

Fields

The following fields are returned by SELECT queries:

list

Name	Datatype	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
name	string	The name of the resource.
appliedBy	object	Details of the approver.
appliedDateTime	string (date-time)	The date and time when the review decision was applied.
applyResult	string	The outcome of applying the decision. Known values are: "New", "Applying", "AppliedSuccessfully", "AppliedWithUnknownFailure", "AppliedSuccessfullyButObjectNotFound", and "ApplyNotSupported". (New, Applying, AppliedSuccessfully, AppliedWithUnknownFailure, AppliedSuccessfullyButObjectNotFound, ApplyNotSupported)
decision	string	The decision on the approval step. This value is initially set to NotReviewed. Approvers can take action of Approve/Deny. Known values are: "Approve", "Deny", "NotReviewed", "DontKnow", and "NotNotified". (Approve, Deny, NotReviewed, DontKnow, NotNotified)
insights	array	This is the collection of insights for this decision item.
justification	string	Justification provided by approvers for their action.
principal	object	Principal associated with the decision record. Can be AccessReviewDecisionUserIdentity or AccessReviewDecisionServicePrincipalIdentity.
principalResourceMembership	object	Details of the membership type.
recommendation	string	The feature- generated recommendation shown to the reviewer. Known values are: "Approve", "Deny", and "NoInfoAvailable". (Approve, Deny, NoInfoAvailable)
resource	object	Resource associated with this decision record.
reviewedBy	object	Details of the approver.
reviewedDateTime	string (date-time)	Date Time when a decision was taken.
systemData	object	Azure Resource Manager metadata containing createdBy and modifiedBy information.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list	select	scope, schedule_definition_id, id	$filter	Get access review instance decisions.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
id	string	The id of the access review instance. Required.
schedule_definition_id	string	The id of the access review schedule definition. Required.
scope	string	The scope of the resource. Required.
$filter	string	The filter to apply on the operation. Other than standard filters, one custom filter option is supported : 'assignedToMeToReview()'. When one specified $filter=assignedToMeToReview(), only items that are assigned to the calling user to review are returned. Default value is None.

SELECT examples

list

Get access review instance decisions.

SELECT
id,
name,
appliedBy,
appliedDateTime,
applyResult,
decision,
insights,
justification,
principal,
principalResourceMembership,
recommendation,
resource,
reviewedBy,
reviewedDateTime,
systemData,
type
FROM azure.authorization.scope_access_review_instance_decisions
WHERE scope = '{{ scope }}' -- required
AND schedule_definition_id = '{{ schedule_definition_id }}' -- required
AND id = '{{ id }}' -- required
AND $filter = '{{ $filter }}'
;