Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[AutoPR authorization] Exposing RoleAssignmentApproval APIs #1143

Closed
wants to merge 1 commit into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
187 changes: 187 additions & 0 deletions schemas/2015-07-01/Microsoft.Authorization.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,187 @@
{
"id": "https://schema.management.azure.com/schemas/2015-07-01/Microsoft.Authorization.json#",
"$schema": "http://json-schema.org/draft-04/schema#",
"title": "Microsoft.Authorization",
"description": "Microsoft Authorization Resource Types",
"resourceDefinitions": {},
"unknown_resourceDefinitions": {
"roleAssignments": {
"type": "object",
"properties": {
"apiVersion": {
"type": "string",
"enum": [
"2015-07-01"
]
},
"name": {
"type": "string",
"description": "The name of the role assignment to create. It can be any valid GUID."
},
"properties": {
"oneOf": [
{
"$ref": "#/definitions/RoleAssignmentProperties"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Role assignment properties."
},
"type": {
"type": "string",
"enum": [
"Microsoft.Authorization/roleAssignments"
]
}
},
"required": [
"apiVersion",
"name",
"properties",
"type"
],
"description": "Microsoft.Authorization/roleAssignments"
},
"roleDefinitions": {
"type": "object",
"properties": {
"apiVersion": {
"type": "string",
"enum": [
"2015-07-01"
]
},
"name": {
"type": "string",
"description": "The ID of the role definition."
},
"properties": {
"oneOf": [
{
"$ref": "#/definitions/RoleDefinitionProperties"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Role definition properties."
},
"type": {
"type": "string",
"enum": [
"Microsoft.Authorization/roleDefinitions"
]
}
},
"required": [
"apiVersion",
"name",
"properties",
"type"
],
"description": "Microsoft.Authorization/roleDefinitions"
}
},
"definitions": {
"Permission": {
"type": "object",
"properties": {
"actions": {
"oneOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Allowed actions."
},
"notActions": {
"oneOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Denied actions."
}
},
"description": "Role definition permissions."
},
"RoleAssignmentProperties": {
"type": "object",
"properties": {
"principalId": {
"type": "string",
"description": "The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group."
},
"roleDefinitionId": {
"type": "string",
"description": "The role definition ID used in the role assignment."
}
},
"required": [
"principalId",
"roleDefinitionId"
],
"description": "Role assignment properties."
},
"RoleDefinitionProperties": {
"type": "object",
"properties": {
"assignableScopes": {
"oneOf": [
{
"type": "array",
"items": {
"type": "string"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Role definition assignable scopes."
},
"description": {
"type": "string",
"description": "The role definition description."
},
"permissions": {
"oneOf": [
{
"type": "array",
"items": {
"$ref": "#/definitions/Permission"
}
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Role definition permissions."
},
"roleName": {
"type": "string",
"description": "The role name."
},
"type": {
"type": "string",
"description": "The role type."
}
},
"description": "Role definition properties."
}
}
}
75 changes: 75 additions & 0 deletions schemas/2017-10-01-preview/Microsoft.Authorization.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
{
"id": "https://schema.management.azure.com/schemas/2017-10-01-preview/Microsoft.Authorization.json#",
"$schema": "http://json-schema.org/draft-04/schema#",
"title": "Microsoft.Authorization",
"description": "Microsoft Authorization Resource Types",
"resourceDefinitions": {},
"unknown_resourceDefinitions": {
"roleAssignments": {
"type": "object",
"properties": {
"apiVersion": {
"type": "string",
"enum": [
"2017-10-01-preview"
]
},
"name": {
"type": "string",
"description": "The name of the role assignment to create. It can be any valid GUID."
},
"properties": {
"oneOf": [
{
"$ref": "#/definitions/RoleAssignmentProperties"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "Role assignment properties."
},
"type": {
"type": "string",
"enum": [
"Microsoft.Authorization/roleAssignments"
]
}
},
"required": [
"apiVersion",
"name",
"properties",
"type"
],
"description": "Microsoft.Authorization/roleAssignments"
}
},
"definitions": {
"RoleAssignmentProperties": {
"type": "object",
"properties": {
"canDelegate": {
"oneOf": [
{
"type": "boolean"
},
{
"$ref": "https://schema.management.azure.com/schemas/common/definitions.json#/definitions/expression"
}
],
"description": "The delegation flag used for creating a role assignment"
},
"principalId": {
"type": "string",
"description": "The principal ID assigned to the role. This maps to the ID inside the Active Directory. It can point to a user, service principal, or security group."
},
"roleDefinitionId": {
"type": "string",
"description": "The role definition ID used in the role assignment."
}
},
"description": "Role assignment properties."
}
}
}
Loading