Microsoft.Security deviceSecurityGroups template reference

Template format

To create a Microsoft.Security/deviceSecurityGroups resource, add the following JSON to the resources section of your template.

{
  "name": "string",
  "type": "Microsoft.Security/deviceSecurityGroups",
  "apiVersion": "2019-08-01",
  "properties": {
    "thresholdRules": [
      {
        "isEnabled": "boolean",
        "minThreshold": "integer",
        "maxThreshold": "integer",
        "ruleType": "string"
      }
    ],
    "timeWindowRules": [
      {
        "timeWindowSize": "string",
        "ruleType": "string"
      }
    ],
    "allowlistRules": [
      {
        "isEnabled": "boolean",
        "allowlistValues": [
          "string"
        ],
        "ruleType": "string"
      }
    ],
    "denylistRules": [
      {
        "isEnabled": "boolean",
        "denylistValues": [
          "string"
        ],
        "ruleType": "string"
      }
    ]
  }
}

Property values

The following tables describe the values you need to set in the schema.

Microsoft.Security/deviceSecurityGroups object

Name Type Required Value
name string Yes The name of the device security group. Note that the name of the device security group is case insensitive.
type enum Yes Microsoft.Security/deviceSecurityGroups
apiVersion enum Yes 2019-08-01
properties object Yes Device Security group data - DeviceSecurityGroupProperties object

DeviceSecurityGroupProperties object

Name Type Required Value
thresholdRules array No The list of custom alert threshold rules. - ThresholdCustomAlertRule object
timeWindowRules array No The list of custom alert time-window rules. - TimeWindowCustomAlertRule object
allowlistRules array No The allow-list custom alert rules. - AllowlistCustomAlertRule object
denylistRules array No The deny-list custom alert rules. - DenylistCustomAlertRule object

ThresholdCustomAlertRule object

Name Type Required Value
isEnabled boolean Yes Status of the custom alert.
minThreshold integer Yes The minimum threshold.
maxThreshold integer Yes The maximum threshold.
ruleType string Yes

TimeWindowCustomAlertRule object

Name Type Required Value
timeWindowSize string Yes The time window size in iso8601 format.
ruleType string Yes

AllowlistCustomAlertRule object

Name Type Required Value
isEnabled boolean Yes Status of the custom alert.
allowlistValues array Yes The values to allow. The format of the values depends on the rule type. - string
ruleType string Yes

DenylistCustomAlertRule object

Name Type Required Value
isEnabled boolean Yes Status of the custom alert.
denylistValues array Yes The values to deny. The format of the values depends on the rule type. - string
ruleType string Yes