Microsoft.SecurityInsights cases 2019-01-01-preview

• Latest
• 2019-01-01-preview

Bicep resource definition

The cases resource type is an extension resource, which means you can apply it to another resource.

Use the scope property on this resource to set the scope for this resource. See Set scope on extension resources in Bicep.

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.SecurityInsights/cases resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.SecurityInsights/cases@2019-01-01-preview' = {
  name: 'string'
  scope: resourceSymbolicName
  etag: 'string'
  properties: {
    closedReasonText: 'string'
    closeReason: 'string'
    description: 'string'
    endTimeUtc: 'string'
    labels: [
      'string'
    ]
    owner: {
      objectId: 'string'
    }
    severity: 'string'
    startTimeUtc: 'string'
    status: 'string'
    title: 'string'
  }
}

Property values

cases

Name	Description	Value
name	The resource name	string (required)
scope	Use when creating an extension resource at a scope that is different than the deployment scope.	Target resource For Bicep, set this property to the symbolic name of the resource to apply the extension resource.
etag	Etag of the azure resource	string
properties	Case properties	CaseProperties

CaseProperties

Name	Description	Value
closedReasonText	the case close reason details	string
closeReason	The reason the case was closed	'Dismissed' 'FalsePositive' 'Other' 'Resolved' 'TruePositive'
description	The description of the case	string
endTimeUtc	The end time of the case	string
labels	List of labels relevant to this case	string[]
owner	Describes a user that the case is assigned to	UserInfo
severity	The severity of the case	'Critical' 'High' 'Informational' 'Low' 'Medium' (required)
startTimeUtc	The start time of the case	string
status	The status of the case	'Closed' 'Draft' 'InProgress' 'New' (required)
title	The title of the case	string (required)

UserInfo

Name	Description	Value
objectId	The object id of the user.	string

ARM template resource definition

The cases resource type is an extension resource, which means you can apply it to another resource.

Use the scope property on this resource to set the scope for this resource. See Set scope on extension resources in ARM templates.

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.SecurityInsights/cases resource, add the following JSON to your template.

{
  "type": "Microsoft.SecurityInsights/cases",
  "apiVersion": "2019-01-01-preview",
  "name": "string",
  "scope": "string",
  "etag": "string",
  "properties": {
    "closedReasonText": "string",
    "closeReason": "string",
    "description": "string",
    "endTimeUtc": "string",
    "labels": [ "string" ],
    "owner": {
      "objectId": "string"
    },
    "severity": "string",
    "startTimeUtc": "string",
    "status": "string",
    "title": "string"
  }
}

Property values

cases

Name	Description	Value
type	The resource type	'Microsoft.SecurityInsights/cases'
apiVersion	The resource api version	'2019-01-01-preview'
name	The resource name	string (required)
scope	Use when creating an extension resource at a scope that is different than the deployment scope.	Target resource For JSON, set the value to the full name of the resource to apply the extension resource to.
etag	Etag of the azure resource	string
properties	Case properties	CaseProperties

CaseProperties

Name	Description	Value
closedReasonText	the case close reason details	string
closeReason	The reason the case was closed	'Dismissed' 'FalsePositive' 'Other' 'Resolved' 'TruePositive'
description	The description of the case	string
endTimeUtc	The end time of the case	string
labels	List of labels relevant to this case	string[]
owner	Describes a user that the case is assigned to	UserInfo
severity	The severity of the case	'Critical' 'High' 'Informational' 'Low' 'Medium' (required)
startTimeUtc	The start time of the case	string
status	The status of the case	'Closed' 'Draft' 'InProgress' 'New' (required)
title	The title of the case	string (required)

UserInfo

Name	Description	Value
objectId	The object id of the user.	string

Terraform (AzAPI provider) resource definition

The cases resource type is an extension resource, which means you can apply it to another resource.

Use the parent_id property on this resource to set the scope for this resource.

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.SecurityInsights/cases resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.SecurityInsights/cases@2019-01-01-preview"
  name = "string"
  parent_id = "string"
  body = jsonencode({
    properties = {
      closedReasonText = "string"
      closeReason = "string"
      description = "string"
      endTimeUtc = "string"
      labels = [
        "string"
      ]
      owner = {
        objectId = "string"
      }
      severity = "string"
      startTimeUtc = "string"
      status = "string"
      title = "string"
    }
    etag = "string"
  })
}

Property values

cases

Name	Description	Value
type	The resource type	"Microsoft.SecurityInsights/cases@2019-01-01-preview"
name	The resource name	string (required)
parent_id	The ID of the resource to apply this extension resource to.	string (required)
etag	Etag of the azure resource	string
properties	Case properties	CaseProperties

CaseProperties

Name	Description	Value
closedReasonText	the case close reason details	string
closeReason	The reason the case was closed	"Dismissed" "FalsePositive" "Other" "Resolved" "TruePositive"
description	The description of the case	string
endTimeUtc	The end time of the case	string
labels	List of labels relevant to this case	string[]
owner	Describes a user that the case is assigned to	UserInfo
severity	The severity of the case	"Critical" "High" "Informational" "Low" "Medium" (required)
startTimeUtc	The start time of the case	string
status	The status of the case	"Closed" "Draft" "InProgress" "New" (required)
title	The title of the case	string (required)

UserInfo

Name	Description	Value
objectId	The object id of the user.	string