Skip to main content

permissions

Creates, updates, deletes, gets or lists a permissions resource.

Overview

Namepermissions
TypeResource
Idazure.billing.permissions

Fields

The following fields are returned by SELECT queries:

The list of billingPermissions a caller has on a customer.

NameDatatypeDescription
actionsarrayThe set of actions that the caller is allowed to perform.
notActionsarrayThe set of actions that the caller is not allowed to perform.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_by_customerselectbillingAccountName, billingProfileName, customerNameLists the billing permissions the caller has for a customer.
list_by_billing_profileselectbillingAccountName, billingProfileNameLists the billing permissions the caller has on a billing profile.
list_by_customer_at_billing_accountselectbillingAccountName, customerNameLists the billing permissions the caller has for a customer at billing account level.
list_by_departmentselectbillingAccountName, departmentNameLists the billing permissions the caller has for a department.
list_by_enrollment_accountselectbillingAccountName, enrollmentAccountNameLists the billing permissions the caller has for an enrollment account.
list_by_billing_accountselectbillingAccountNameLists the billing permissions the caller has on a billing account.
check_access_by_billing_profileexecbillingAccountName, billingProfileNameProvides a list of check access response objects for a billing profile.
check_access_by_customerexecbillingAccountName, billingProfileName, customerNameProvides a list of check access response objects for a customer.
check_access_by_invoice_sectionexecbillingAccountName, billingProfileName, invoiceSectionNameProvides a list of check access response objects for an invoice section.
check_access_by_billing_accountexecbillingAccountNameProvides a list of check access response objects for a billing account.
check_access_by_departmentexecbillingAccountName, departmentNameProvides a list of check access response objects for a department.
check_access_by_enrollment_accountexecbillingAccountName, enrollmentAccountNameProvides a list of check access response objects for an enrollment account.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
billingAccountNamestringThe ID that uniquely identifies a billing account.
billingProfileNamestringThe ID that uniquely identifies a billing profile.
customerNamestringThe ID that uniquely identifies a customer.
departmentNamestringThe name of the department.
enrollmentAccountNamestringThe name of the enrollment account.
invoiceSectionNamestringThe ID that uniquely identifies an invoice section.

SELECT examples

Lists the billing permissions the caller has for a customer.

SELECT
actions,
notActions
FROM azure.billing.permissions
WHERE billingAccountName = '{{ billingAccountName }}' -- required
AND billingProfileName = '{{ billingProfileName }}' -- required
AND customerName = '{{ customerName }}' -- required
;

Lifecycle Methods

Provides a list of check access response objects for a billing profile.

EXEC azure.billing.permissions.check_access_by_billing_profile 
@billingAccountName='{{ billingAccountName }}' --required,
@billingProfileName='{{ billingProfileName }}' --required
@@json=
'{
"actions": "{{ actions }}"
}'
;