RoleAssignment Class
Role Assignments.
Variables are only populated by the server, and will be ignored when sending a request.
- Inheritance
-
RoleAssignment
Constructor
RoleAssignment(*, scope: Optional[str] = None, role_definition_id: Optional[str] = None, principal_id: Optional[str] = None, principal_type: Optional[Union[str, azure.mgmt.authorization.v2020_04_01_preview.models._authorization_management_client_enums.PrincipalType]] = None, can_delegate: Optional[bool] = None, description: Optional[str] = None, condition: Optional[str] = None, condition_version: Optional[str] = None, created_on: Optional[datetime.datetime] = None, updated_on: Optional[datetime.datetime] = None, created_by: Optional[str] = None, updated_by: Optional[str] = None, delegated_managed_identity_resource_id: Optional[str] = None, **kwargs)
Parameters
- principal_type
- str or PrincipalType
Required
The principal type of the assigned principal ID. Possible values include: "User", "Group", "ServicePrincipal", "ForeignGroup".
- condition
- str
Required
The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'.
Variables
- id
- str
The role assignment ID.
- name
- str
The role assignment name.
- type
- str
The role assignment type.
Feedback
Submit and view feedback for