Role Assignments - Create

Referensi

Service:: Authorization

API Version:: 2015-07-01

Membuat penetapan peran.

PUT https://management.azure.com/{scope}/providers/Microsoft.Authorization/roleAssignments/{roleAssignmentName}?api-version=2015-07-01

Parameter URI

Name	In	Required	Type	Description
roleAssignmentName	path	True	string	GUID untuk penetapan peran yang akan dibuat. Nama harus unik dan berbeda untuk setiap penetapan peran.
scope	path	True	string	Cakupan penetapan peran yang akan dibuat. Cakupannya dapat berupa instans sumber daya REST apa pun. Misalnya, gunakan '/subscriptions/{subscription-id}/' untuk langganan, '/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}' untuk grup sumber daya, dan '/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}/providers/{resource-provider}/{resource-type}/{resource-name}' untuk sumber daya.
api-version	query	True	string	Versi API yang digunakan untuk operasi ini.

Isi Permintaan

Name	Required	Type	Description
properties	True	RoleAssignmentProperties	Properti penetapan peran.

Respons

Name	Type	Description
201 Created	RoleAssignment	Dibuat - Mengembalikan informasi tentang penetapan peran.
Other Status Codes	ErrorResponse	Respons kesalahan yang menjelaskan mengapa operasi gagal.

Keamanan

azure_auth

Azure Active Directory Flow OAuth2

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	meniru akun pengguna Anda

Contoh

Create role assignment

Sample Request

PUT https://management.azure.com/scope/providers/Microsoft.Authorization/roleAssignments/roleAssignmentName?api-version=2015-07-01

{
  "properties": {
    "roleDefinitionId": "/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772",
    "principalId": "d93a38bc-d029-4160-bfb0-fbda779ac214"
  }
}

import com.azure.core.util.Context;
import com.azure.resourcemanager.authorization.models.RoleAssignmentCreateParameters;
import com.azure.resourcemanager.authorization.models.RoleAssignmentProperties;

/** Samples for RoleAssignments Create. */
public final class Main {
    /*
     * x-ms-original-file: specification/authorization/resource-manager/Microsoft.Authorization/stable/2015-07-01/examples/PutRoleAssignment.json
     */
    /**
     * Sample code: Create role assignment.
     *
     * @param azure The entry point for accessing resource management APIs in Azure.
     */
    public static void createRoleAssignment(com.azure.resourcemanager.AzureResourceManager azure) {
        azure
            .accessManagement()
            .roleAssignments()
            .manager()
            .roleServiceClient()
            .getRoleAssignments()
            .createWithResponse(
                "scope",
                "roleAssignmentName",
                new RoleAssignmentCreateParameters()
                    .withProperties(
                        new RoleAssignmentProperties()
                            .withRoleDefinitionId(
                                "/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772")
                            .withPrincipalId("d93a38bc-d029-4160-bfb0-fbda779ac214")),
                Context.NONE);
    }
}

Read this SDK documentation on how to add the SDK to your project and authenticate.

package armauthorization_test

import (
	"context"
	"log"

	"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/authorization/armauthorization"
)

// Generated from example definition: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/authorization/resource-manager/Microsoft.Authorization/stable/2015-07-01/examples/PutRoleAssignment.json
func ExampleRoleAssignmentsClient_Create() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	client, err := armauthorization.NewRoleAssignmentsClient("<subscription-id>", cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	_, err = client.Create(ctx,
		"scope",
		"roleAssignmentName",
		armauthorization.RoleAssignmentCreateParameters{
			Properties: &armauthorization.RoleAssignmentProperties{
				PrincipalID:      to.Ptr("d93a38bc-d029-4160-bfb0-fbda779ac214"),
				RoleDefinitionID: to.Ptr("/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/roleDefinitions/de139f84-1756-47ae-9be6-808fbbe84772"),
			},
		},
		nil)
	if err != nil {
		log.Fatalf("failed to finish the request: %v", err)
	}
}

Read this SDK documentation on how to add the SDK to your project and authenticate.

Sample Response

Status code:: 201

{
  "properties": {
    "roleDefinitionId": "/subscriptions/subId/providers/Microsoft.Authorization/roleDefinitions/roledefinitionId",
    "principalId": "Pid",
    "scope": "/subscriptions/subId/resourcegroups/rgname"
  },
  "id": "/subscriptions/subId/resourcegroups/rgname/providers/Microsoft.Authorization/roleAssignments/roleassignmentId",
  "type": "Microsoft.Authorization/roleAssignments",
  "name": "roleassignmentId"
}

Definisi

ErrorAdditionalInfo	Info tambahan kesalahan manajemen sumber daya.
ErrorDetail	Detail kesalahan.
ErrorResponse	Respons kesalahan
RoleAssignment	Penetapan Peran
RoleAssignmentCreateParameters	Penetapan peran membuat parameter.
RoleAssignmentProperties	Properti penetapan peran.
RoleAssignmentPropertiesWithScope	Properti penetapan peran dengan cakupan.

ErrorAdditionalInfo

Info tambahan kesalahan manajemen sumber daya.

Name	Type	Description
info	object	Info tambahan.
type	string	Jenis info tambahan.

ErrorDetail

Detail kesalahan.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	Info tambahan kesalahan.
code	string	Kode kesalahan.
details	ErrorDetail[]	Detail kesalahan.
message	string	Pesan kesalahan.
target	string	Target kesalahan.

ErrorResponse

Respons kesalahan

Name	Type	Description
error	ErrorDetail	Objek kesalahan.

RoleAssignment

Penetapan Peran

Name	Type	Description
id	string	ID penetapan peran.
name	string	Nama penetapan peran.
properties	RoleAssignmentPropertiesWithScope	Properti penetapan peran.
type	string	Jenis penetapan peran.

RoleAssignmentCreateParameters

Penetapan peran membuat parameter.

Name	Type	Description
properties	RoleAssignmentProperties	Properti penetapan peran.

RoleAssignmentProperties

Properti penetapan peran.

Name	Type	Description
principalId	string	ID utama yang ditetapkan ke peran. Ini memetakan ke ID di dalam Direktori Aktif. Ini dapat menunjuk ke pengguna, perwakilan layanan, atau grup keamanan.
roleDefinitionId	string	ID definisi peran yang digunakan dalam penetapan peran.

RoleAssignmentPropertiesWithScope

Properti penetapan peran dengan cakupan.

Name	Type	Description
principalId	string	ID utama.
roleDefinitionId	string	ID definisi peran.
scope	string	Cakupan penetapan peran.