Role Definitions - Delete

Service:

Key Vault

API Version:

7.3

Deletes a custom role definition.

DELETE {vaultBaseUrl}/{scope}/providers/Microsoft.Authorization/roleDefinitions/{roleDefinitionName}?api-version=7.3

URI Parameters

Name	In	Required	Type	Description
roleDefinitionName	path	True	string	The name (GUID) of the role definition to delete.
scope	path	True	string	The scope of the role definition to delete. Managed HSM only supports '/'.
vaultBaseUrl	path	True	string	The vault name, for example https://myvault.vault.azure.net.
api-version	query	True	string	Client API version.

Responses

Name	Type	Description
200 OK	RoleDefinition	OK - Returns information about the role definition that was deleted.
Other Status Codes	KeyVaultError	Key Vault error response describing why the operation failed.

Examples

DeleteRoleDefinition

Sample Request

HTTP

DELETE https://myvault.vault.azure.net////providers/Microsoft.Authorization/roleDefinitions/00000000-0000-0000-0000-000000000000?api-version=7.3

Sample Response

Status code:

200

{
  "properties": {
    "roleName": "My custom role",
    "type": "CustomRole",
    "description": "Role description",
    "assignableScopes": [
      "/"
    ],
    "permissions": [
      {
        "dataActions": [
          "Microsoft.KeyVault/managedHsm/keys/sign/action"
        ]
      }
    ]
  },
  "id": "Microsoft.KeyVault/providers/Microsoft.Authorization/roleDefinitions/00000000-0000-0000-0000-000000000000",
  "type": "Microsoft.Authorization/roleDefinitions",
  "name": "00000000-0000-0000-0000-000000000000"
}

Definitions

Error	The key vault server error.
KeyVaultError	The key vault error exception.
Permission	Role definition permissions.
RoleDefinition	Role definition.
RoleDefinitionType	The role definition type.
RoleType	The role type.

Error

The key vault server error.

Name	Type	Description
code	string	The error code.
innererror	Error	The key vault server error.
message	string	The error message.

KeyVaultError

The key vault error exception.

Name	Type	Description
error	Error	The key vault server error.

Permission

Role definition permissions.

Name	Type	Description
actions	string[]	Action permissions that are granted.
dataActions	string[]	Data action permissions that are granted.
notActions	string[]	Action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal.
notDataActions	string[]	Data action permissions that are excluded but not denied. They may be granted by other role definitions assigned to a principal.

RoleDefinition

Role definition.

Name	Type	Description
id	string	The role definition ID.
name	string	The role definition name.
properties.assignableScopes	string[]	Role definition assignable scopes.
properties.description	string	The role definition description.
properties.permissions	Permission[]	Role definition permissions.
properties.roleName	string	The role name.
properties.type	RoleType	The role type.
type	RoleDefinitionType	The role definition type.

RoleDefinitionType

The role definition type.

Name	Type	Description
Microsoft.Authorization/roleDefinitions	string

RoleType

The role type.

Name	Type	Description
AKVBuiltInRole	string	Built in role.
CustomRole	string	Custom role.