Microsoft.Blueprint blueprintAssignments

The blueprintAssignments resource type can be deployed to: Resource groups, Subscriptions, Management groups.

To learn about resource group deployments, see Bicep or ARM template. To learn about subscription deployments, see Bicep or ARM template To learn about management group deployments, see Bicep or ARM template

Template format

To create a Microsoft.Blueprint/blueprintAssignments resource, add the following Bicep or JSON to your template.

resource symbolicname 'Microsoft.Blueprint/blueprintAssignments@2018-11-01-preview' = {
  name: 'string'
  location: 'string'
  identity: {
    principalId: 'string'
    tenantId: 'string'
    type: 'string'
    userAssignedIdentities: {}
  properties: {
    blueprintId: 'string'
    description: 'string'
    displayName: 'string'
    locks: {
      excludedPrincipals: [
    parameters: {}
    resourceGroups: {}
    scope: 'string'

Property values


Name Description Value
type The resource type

For Bicep, set this value in the resource declaration.
apiVersion The resource api version

For Bicep, set this value in the resource declaration.
name The resource name string (required)
location The location of this blueprint assignment. string (required)
identity Managed identity generic object. ManagedServiceIdentity (required)
properties Detailed properties for a blueprint assignment. AssignmentProperties (required)


Name Description Value
principalId Azure Active Directory principal ID associated with this Identity. string
tenantId ID of the Azure Active Directory. string
type Type of the managed identity. 'None'
userAssignedIdentities The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity. object


Name Description Value
blueprintId ID of the published version of a blueprint definition. string
description Multi-line explain this resource. string
displayName One-liner string explain this resource. string
locks Defines how resources deployed by a blueprint assignment are locked. AssignmentLockSettings
parameters Blueprint assignment parameter values. object (required)
resourceGroups Names and locations of resource group placeholders. object (required)
scope The target subscription scope of the blueprint assignment (format: '/subscriptions/{subscriptionId}'). For management group level assignments, the property is required. string


Name Description Value
excludedPrincipals List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted. string[]