Feedback Edit

EligibleAuthorization Class

  • Reference

Eligible authorization tuple containing principle Id (of user/service principal/security group), role definition id, and the just-in-time access setting.

All required parameters must be populated in order to send to Azure.

Inheritance
Model
EligibleAuthorization

Constructor

EligibleAuthorization(*, principal_id: str, role_definition_id: str, principal_id_display_name: Optional[str] = None, just_in_time_access_policy: Optional[azure.mgmt.managedservices.models._models_py3.JustInTimeAccessPolicy] = None, **kwargs)

Parameters

principal_id
str
Required

Required. Principal Id of the security group/service principal/user that would be delegated permissions to the projected subscription.

principal_id_display_name
str
Required

Display name of the principal Id.

role_definition_id
str
Required

Required. The role definition identifier. This role will delegate all the permissions that the security group/service principal/user must have on the projected subscription. This role cannot be an owner role.

just_in_time_access_policy
JustInTimeAccessPolicy
Required

Just-in-time access policy setting.