From 4394fb7acca97f30adce871e1266aae37ed0ae52 Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Wed, 13 May 2026 18:12:13 -0700 Subject: [PATCH 1/8] aaz --- Commands/policy/assignment/_create.md | 6 +- Commands/policy/assignment/_delete.md | 4 +- Commands/policy/assignment/_list.md | 8 +- Commands/policy/assignment/_show.md | 4 +- Commands/policy/assignment/_update.md | 4 +- .../policy/assignment/identity/_assign.md | 4 +- .../policy/assignment/identity/_remove.md | 4 +- Commands/policy/assignment/identity/_show.md | 4 +- Commands/policy/assignment/identity/readme.md | 2 +- .../non-compliance-message/_create.md | 4 +- .../non-compliance-message/_delete.md | 4 +- .../non-compliance-message/_list.md | 4 +- .../non-compliance-message/_show.md | 4 +- .../non-compliance-message/_update.md | 4 +- .../non-compliance-message/readme.md | 2 +- Commands/policy/assignment/readme.md | 4 +- Commands/policy/definition/_create.md | 16 +- Commands/policy/definition/_delete.md | 6 +- Commands/policy/definition/_list.md | 10 +- Commands/policy/definition/_show.md | 6 +- Commands/policy/definition/_update.md | 6 +- Commands/policy/definition/readme.md | 7 +- Commands/policy/definition/version/_create.md | 19 + Commands/policy/definition/version/_delete.md | 19 + Commands/policy/definition/version/_list.md | 20 + Commands/policy/definition/version/_show.md | 19 + Commands/policy/definition/version/_update.md | 12 + Commands/policy/definition/version/readme.md | 22 + Commands/policy/enrollment/_create.md | 11 + Commands/policy/enrollment/_delete.md | 11 + Commands/policy/enrollment/_list.md | 13 + Commands/policy/enrollment/_show.md | 11 + Commands/policy/enrollment/_update.md | 11 + Commands/policy/enrollment/readme.md | 22 + Commands/policy/exemption/_create.md | 4 +- Commands/policy/exemption/_delete.md | 4 +- Commands/policy/exemption/_list.md | 8 +- Commands/policy/exemption/_show.md | 4 +- Commands/policy/exemption/_update.md | 4 +- Commands/policy/readme.md | 5 +- Commands/policy/set-definition/_create.md | 11 +- Commands/policy/set-definition/_delete.md | 6 +- Commands/policy/set-definition/_list.md | 8 +- Commands/policy/set-definition/_show.md | 6 +- Commands/policy/set-definition/_update.md | 6 +- Commands/policy/set-definition/readme.md | 5 + .../policy/set-definition/version/_create.md | 17 + .../policy/set-definition/version/_delete.md | 17 + .../policy/set-definition/version/_list.md | 18 + .../policy/set-definition/version/_show.md | 17 + .../policy/set-definition/version/_update.md | 10 + .../policy/set-definition/version/readme.md | 20 + Commands/readme.md | 5 +- .../2025-11-01.json | 1 + .../2025-11-01.xml | 439 +++ .../2025-11-01.json | 1 + .../2025-11-01.xml | 445 +++ .../2025-11-01.json | 1 + .../2025-11-01.xml | 484 +++ .../2025-11-01.json | 1 + .../2025-11-01.xml | 490 +++ .../2025-11-01.json | 1 + .../2025-11-01.xml | 561 +++ .../2025-11-01.md | 1 + .../2025-11-01.json | 1 + .../2025-11-01.xml | 1329 +++++++ .../2025-11-01.md | 1 + .../2025-11-01.json | 1 + .../2025-11-01.xml | 1367 ++++++++ .../2026-01-01-preview.json | 1 + .../2026-01-01-preview.xml | 380 ++ .../2026-01-01-preview.json | 1 + .../2026-01-01-preview.xml | 399 +++ .../2025-11-01.md | 1 + .../2025-11-01.json | 1 + .../2025-11-01.xml | 1471 ++++++++ .../2025-11-01.md | 1 + .../2025-11-01.json | 1 + .../2025-11-01.xml | 1509 ++++++++ .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2026-01-01-preview.md | 1 + .../2026-01-01-preview.md | 1 + .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2025-11-01.md | 1 + .../2026-01-01-preview.md | 1 + .../2026-01-01-preview.md | 1 + .../2025-11-01.json | 1 + .../2025-11-01.xml | 3078 +++++++++++++++++ .../2026-01-01-preview.json | 1 + .../2026-01-01-preview.xml | 707 ++++ .../2026-01-01-preview.json | 1 + .../2026-01-01-preview.xml | 657 ++++ 99 files changed, 13749 insertions(+), 81 deletions(-) create mode 100644 Commands/policy/definition/version/_create.md create mode 100644 Commands/policy/definition/version/_delete.md create mode 100644 Commands/policy/definition/version/_list.md create mode 100644 Commands/policy/definition/version/_show.md create mode 100644 Commands/policy/definition/version/_update.md create mode 100644 Commands/policy/definition/version/readme.md create mode 100644 Commands/policy/enrollment/_create.md create mode 100644 Commands/policy/enrollment/_delete.md create mode 100644 Commands/policy/enrollment/_list.md create mode 100644 Commands/policy/enrollment/_show.md create mode 100644 Commands/policy/enrollment/_update.md create mode 100644 Commands/policy/enrollment/readme.md create mode 100644 Commands/policy/set-definition/version/_create.md create mode 100644 Commands/policy/set-definition/version/_delete.md create mode 100644 Commands/policy/set-definition/version/_list.md create mode 100644 Commands/policy/set-definition/version/_show.md create mode 100644 Commands/policy/set-definition/version/_update.md create mode 100644 Commands/policy/set-definition/version/readme.md create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25z/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25z/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md create mode 100644 Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md create mode 100644 Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json create mode 100644 Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml create mode 100644 Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json create mode 100644 Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml create mode 100644 Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json create mode 100644 Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml diff --git a/Commands/policy/assignment/_create.md b/Commands/policy/assignment/_create.md index ad69df0d2..34afa5ee8 100644 --- a/Commands/policy/assignment/_create.md +++ b/Commands/policy/assignment/_create.md @@ -6,9 +6,9 @@ Create a policy assignment with the given scope and name. Policy assignments app ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples @@ -19,7 +19,7 @@ Create a policy assignment with the given scope and name. Policy assignments app - Create a resource policy assignment and provide rule parameter values ```bash - Create a resource policy assignment and provide rule parameter values policy assignment create --policy {policyName} -p "{ 'allowedLocations': { 'value': [ 'australiaeast', 'eastus', 'japaneast' ] } }" + policy assignment create --policy {policyName} -p "{ 'allowedLocations': { 'value': [ 'australiaeast', 'eastus', 'japaneast' ] } }" ``` - Create a resource policy assignment with a system assigned identity diff --git a/Commands/policy/assignment/_delete.md b/Commands/policy/assignment/_delete.md index 977c837e3..287b5aba6 100644 --- a/Commands/policy/assignment/_delete.md +++ b/Commands/policy/assignment/_delete.md @@ -6,9 +6,9 @@ Delete the policy assignment with the given name and scope. ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/_list.md b/Commands/policy/assignment/_list.md index a578f12b1..3c3d7c487 100644 --- a/Commands/policy/assignment/_list.md +++ b/Commands/policy/assignment/_list.md @@ -6,11 +6,11 @@ Retrieve the list of all policy assignments applicable to the given subscription ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml) **Stable** - - - + + + #### examples diff --git a/Commands/policy/assignment/_show.md b/Commands/policy/assignment/_show.md index a460cae31..38a373d5c 100644 --- a/Commands/policy/assignment/_show.md +++ b/Commands/policy/assignment/_show.md @@ -6,9 +6,9 @@ Retrieve and show the details of a single policy assignment with the given name ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/_update.md b/Commands/policy/assignment/_update.md index 0f6eb2e88..19fa503db 100644 --- a/Commands/policy/assignment/_update.md +++ b/Commands/policy/assignment/_update.md @@ -6,9 +6,9 @@ Update the policy assignment with the given name and scope by applying the given ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/identity/_assign.md b/Commands/policy/assignment/identity/_assign.md index 6258f35c8..c07e0feb2 100644 --- a/Commands/policy/assignment/identity/_assign.md +++ b/Commands/policy/assignment/identity/_assign.md @@ -6,9 +6,9 @@ Assign the system or user assigned managed identity to the policy assignment mat ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/identity/_remove.md b/Commands/policy/assignment/identity/_remove.md index fba4c872b..dd4004bb0 100644 --- a/Commands/policy/assignment/identity/_remove.md +++ b/Commands/policy/assignment/identity/_remove.md @@ -6,9 +6,9 @@ Remove the system or user assigned managed identity from the policy assignment m ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/identity/_show.md b/Commands/policy/assignment/identity/_show.md index 128916730..c3839dcb2 100644 --- a/Commands/policy/assignment/identity/_show.md +++ b/Commands/policy/assignment/identity/_show.md @@ -6,9 +6,9 @@ Retrieve and show the details of the system or user assigned managed identity of ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/identity/readme.md b/Commands/policy/assignment/identity/readme.md index 9eb2acc4e..f5f3fa271 100644 --- a/Commands/policy/assignment/identity/readme.md +++ b/Commands/policy/assignment/identity/readme.md @@ -1,6 +1,6 @@ # [Group] _policy assignment identity_ -Managed identity of the policy assignment. +Manage identity of the policy assignment. The system or user assigned managed identity used by the enclosing policy assignment for remediation tasks. diff --git a/Commands/policy/assignment/non-compliance-message/_create.md b/Commands/policy/assignment/non-compliance-message/_create.md index 1370958c3..68dfe9a9b 100644 --- a/Commands/policy/assignment/non-compliance-message/_create.md +++ b/Commands/policy/assignment/non-compliance-message/_create.md @@ -6,9 +6,9 @@ Create a customized message used to report non-compliance by the policy assignme ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/non-compliance-message/_delete.md b/Commands/policy/assignment/non-compliance-message/_delete.md index a0b2bbe8c..4a8b442de 100644 --- a/Commands/policy/assignment/non-compliance-message/_delete.md +++ b/Commands/policy/assignment/non-compliance-message/_delete.md @@ -6,9 +6,9 @@ Delete a non-compliance message from the policy assignment matching the given na ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/non-compliance-message/_list.md b/Commands/policy/assignment/non-compliance-message/_list.md index fa8f678ef..5f62365b0 100644 --- a/Commands/policy/assignment/non-compliance-message/_list.md +++ b/Commands/policy/assignment/non-compliance-message/_list.md @@ -6,9 +6,9 @@ Retrieve all non-compliance messages from the policy assignment matching the giv ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/non-compliance-message/_show.md b/Commands/policy/assignment/non-compliance-message/_show.md index 51a5386f7..8ec12fbe1 100644 --- a/Commands/policy/assignment/non-compliance-message/_show.md +++ b/Commands/policy/assignment/non-compliance-message/_show.md @@ -6,9 +6,9 @@ Retrieve and show the details of a non-compliance message belonging to the polic ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/non-compliance-message/_update.md b/Commands/policy/assignment/non-compliance-message/_update.md index ab0a61337..38b7e8629 100644 --- a/Commands/policy/assignment/non-compliance-message/_update.md +++ b/Commands/policy/assignment/non-compliance-message/_update.md @@ -6,9 +6,9 @@ Update a non-compliance message belonging to the policy assignment matching the ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml) **Stable** - + #### examples diff --git a/Commands/policy/assignment/non-compliance-message/readme.md b/Commands/policy/assignment/non-compliance-message/readme.md index c8acfe708..f713d8a84 100644 --- a/Commands/policy/assignment/non-compliance-message/readme.md +++ b/Commands/policy/assignment/non-compliance-message/readme.md @@ -1,6 +1,6 @@ # [Group] _policy assignment non-compliance-message_ -Non-compliance message used by the policy assignment. +Manage non-compliance message used by the policy assignment. Customized message used by the enclosing policy assignment to report non-compliance. diff --git a/Commands/policy/assignment/readme.md b/Commands/policy/assignment/readme.md index fa94adeb3..026910534 100644 --- a/Commands/policy/assignment/readme.md +++ b/Commands/policy/assignment/readme.md @@ -7,10 +7,10 @@ Policy assignments are used to apply a policy definition or policy set definitio ## Subgroups - [identity](/Commands/policy/assignment/identity/readme.md) -: Managed identity of the policy assignment. +: Manage identity of the policy assignment. - [non-compliance-message](/Commands/policy/assignment/non-compliance-message/readme.md) -: Non-compliance message used by the policy assignment. +: Manage non-compliance message used by the policy assignment. ## Commands diff --git a/Commands/policy/definition/_create.md b/Commands/policy/definition/_create.md index c04075c12..6f0a438cb 100644 --- a/Commands/policy/definition/_create.md +++ b/Commands/policy/definition/_create.md @@ -6,10 +6,10 @@ Create a policy definition in the given subscription or management group with th ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples @@ -32,3 +32,13 @@ Create a policy definition in the given subscription or management group with th ```bash policy definition create --name TagsPolicyDefinition --subscription "MySubscription" --mode Indexed --rules "{ 'if': { 'field': 'tags', 'exists': 'false' }, 'then': { 'effect': 'deny' } }" ``` + +- Create a read-only storage policy with newer version + ```bash + policy definition create --name readOnlyStorage --rules "{ 'if': { 'field': 'type', 'equals': 'Microsoft.Storage/storageAccounts/write' }, 'then': { 'effect': 'deny' } }" --version 2.0.0 + ``` + +- Create a policy definition with external evaluation enforcement settings + ```bash + policy definition create --name externalPolicy --rules "{ 'if': { 'value': '[claims().isValid]', 'equals': true }, 'then': { 'effect': 'deny' } }" --external-evaluation-enforcement-settings "{ 'roleDefinitionIds': [ '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c' ], 'endpointSettings': { 'kind': 'CoinFlip' } }" + ``` diff --git a/Commands/policy/definition/_delete.md b/Commands/policy/definition/_delete.md index 940d960dd..30bc367cf 100644 --- a/Commands/policy/definition/_delete.md +++ b/Commands/policy/definition/_delete.md @@ -6,10 +6,10 @@ Delete the policy definition in the given subscription or management group with ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples diff --git a/Commands/policy/definition/_list.md b/Commands/policy/definition/_list.md index 28d64b454..8a688f4af 100644 --- a/Commands/policy/definition/_list.md +++ b/Commands/policy/definition/_list.md @@ -1,16 +1,16 @@ # [Command] _policy definition list_ -Retrieve policy definitions. +Retrieves policy definition. Retrieve the list of all policy definitions in the given subscription or management group. ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml) **Stable** - - - + + + #### examples diff --git a/Commands/policy/definition/_show.md b/Commands/policy/definition/_show.md index bc75e9bc2..582a51dbf 100644 --- a/Commands/policy/definition/_show.md +++ b/Commands/policy/definition/_show.md @@ -6,10 +6,10 @@ Retrieve and show the details of the policy definition in the given subscription ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples diff --git a/Commands/policy/definition/_update.md b/Commands/policy/definition/_update.md index e60789c3a..614c957d3 100644 --- a/Commands/policy/definition/_update.md +++ b/Commands/policy/definition/_update.md @@ -6,10 +6,10 @@ Update the policy definition in the given subscription or management group with ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples diff --git a/Commands/policy/definition/readme.md b/Commands/policy/definition/readme.md index d5aafe88c..b38737ccc 100644 --- a/Commands/policy/definition/readme.md +++ b/Commands/policy/definition/readme.md @@ -4,6 +4,11 @@ Manage policy definitions. Policy definitions are rules that specify allowed or disallowed Azure resource configurations. +## Subgroups + +- [version](/Commands/policy/definition/version/readme.md) +: Manage policy definition versions. + ## Commands - [create](/Commands/policy/definition/_create.md) @@ -13,7 +18,7 @@ Policy definitions are rules that specify allowed or disallowed Azure resource c : Delete a policy definition. - [list](/Commands/policy/definition/_list.md) -: Retrieve policy definitions. +: Retrieves policy definition. - [show](/Commands/policy/definition/_show.md) : Retrieves a policy definition. diff --git a/Commands/policy/definition/version/_create.md b/Commands/policy/definition/version/_create.md new file mode 100644 index 000000000..84164e3b0 --- /dev/null +++ b/Commands/policy/definition/version/_create.md @@ -0,0 +1,19 @@ +# [Command] _policy definition version create_ + +Create a policy definition version. + +Create a policy definition version in the given subscription or management group with the given name and other properties. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + + +#### examples + +- Create or update a policy definition version at management group level + ```bash + policy definition version create --name readOnlyStorage --rules "{ 'if': { 'field': 'type', 'equals': 'Microsoft.Storage/storageAccounts/write' }, 'then': { 'effect': 'deny' } }" --version 1.1.0 + ``` diff --git a/Commands/policy/definition/version/_delete.md b/Commands/policy/definition/version/_delete.md new file mode 100644 index 000000000..14b66e77e --- /dev/null +++ b/Commands/policy/definition/version/_delete.md @@ -0,0 +1,19 @@ +# [Command] _policy definition version delete_ + +Delete a policy definition version. + +Delete the policy definition version in the given subscription or management group with the given name and other properties. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + + +#### examples + +- Delete a policy definition version + ```bash + policy definition version delete --name ResourceNaming --version 1.2.1 + ``` diff --git a/Commands/policy/definition/version/_list.md b/Commands/policy/definition/version/_list.md new file mode 100644 index 000000000..87a2bf73d --- /dev/null +++ b/Commands/policy/definition/version/_list.md @@ -0,0 +1,20 @@ +# [Command] _policy definition version list_ + +Retrieve policy definition versions. + +Retrieve the list of all policy definition versions for a policy definition in the given subscription or management group. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml) **Stable** + + + + + +#### examples + +- List policy definition versions by subscription + ```bash + policy definition version list --name ResourceNaming + ``` diff --git a/Commands/policy/definition/version/_show.md b/Commands/policy/definition/version/_show.md new file mode 100644 index 000000000..6f91a74dd --- /dev/null +++ b/Commands/policy/definition/version/_show.md @@ -0,0 +1,19 @@ +# [Command] _policy definition version show_ + +Retrieves a policy definition version. + +Retrieve and show the details of the policy definition version in the given subscription or management group with the given name and version. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + + +#### examples + +- Retrieve a policy definition version + ```bash + policy definition version show --name ResourceNaming --version 1.2.1 + ``` diff --git a/Commands/policy/definition/version/_update.md b/Commands/policy/definition/version/_update.md new file mode 100644 index 000000000..3c3807c80 --- /dev/null +++ b/Commands/policy/definition/version/_update.md @@ -0,0 +1,12 @@ +# [Command] _policy definition version update_ + +Update a policy definition version. + +Update the policy definition version in the given subscription or management group with the given name and version by applying the given properties. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + diff --git a/Commands/policy/definition/version/readme.md b/Commands/policy/definition/version/readme.md new file mode 100644 index 000000000..a3228faeb --- /dev/null +++ b/Commands/policy/definition/version/readme.md @@ -0,0 +1,22 @@ +# [Group] _policy definition version_ + +Manage policy definition versions. + +Policy definition versions represent different iterations of a policy definition, allowing changes to be tracked and applied in a controlled and predictable way. + +## Commands + +- [create](/Commands/policy/definition/version/_create.md) +: Create a policy definition version. + +- [delete](/Commands/policy/definition/version/_delete.md) +: Delete a policy definition version. + +- [list](/Commands/policy/definition/version/_list.md) +: Retrieve policy definition versions. + +- [show](/Commands/policy/definition/version/_show.md) +: Retrieves a policy definition version. + +- [update](/Commands/policy/definition/version/_update.md) +: Update a policy definition version. diff --git a/Commands/policy/enrollment/_create.md b/Commands/policy/enrollment/_create.md new file mode 100644 index 000000000..97cfea85a --- /dev/null +++ b/Commands/policy/enrollment/_create.md @@ -0,0 +1,11 @@ +# [Command] _policy enrollment create_ + +Create a policy enrollment. + +Create a policy enrollment with the given name and scope. Policy enrollments apply a policy assignment to resources within their scope. For example, when you create a policy enrollment at resource group scope for a policy assignment at the same or higher scope level, the enrollment applies to all applicable resources in the resource group, optionally filtering which policy definitions or resources are included. + +## Versions + +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + + diff --git a/Commands/policy/enrollment/_delete.md b/Commands/policy/enrollment/_delete.md new file mode 100644 index 000000000..6b9e4a2b5 --- /dev/null +++ b/Commands/policy/enrollment/_delete.md @@ -0,0 +1,11 @@ +# [Command] _policy enrollment delete_ + +Delete a policy enrollment. + +Delete the policy enrollment with the given name and scope. + +## Versions + +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + + diff --git a/Commands/policy/enrollment/_list.md b/Commands/policy/enrollment/_list.md new file mode 100644 index 000000000..ed4d3f329 --- /dev/null +++ b/Commands/policy/enrollment/_list.md @@ -0,0 +1,13 @@ +# [Command] _policy enrollment list_ + +Retrieve all applicable policy enrollments. + +Retrieve the list of all policy enrollments applicable to the given resource group, subscription or management group. + +## Versions + +### [2026-01-01-preview](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml) **Stable** + + + + diff --git a/Commands/policy/enrollment/_show.md b/Commands/policy/enrollment/_show.md new file mode 100644 index 000000000..d0b2416a0 --- /dev/null +++ b/Commands/policy/enrollment/_show.md @@ -0,0 +1,11 @@ +# [Command] _policy enrollment show_ + +Retrieve a policy enrollment. + +Retrieve and show the details of the policy enrollment with the given name and scope. + +## Versions + +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + + diff --git a/Commands/policy/enrollment/_update.md b/Commands/policy/enrollment/_update.md new file mode 100644 index 000000000..4d213d243 --- /dev/null +++ b/Commands/policy/enrollment/_update.md @@ -0,0 +1,11 @@ +# [Command] _policy enrollment update_ + +Update a policy enrollment. + +Update the policy enrollment with the given name and scope by applying the given property values. + +## Versions + +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + + diff --git a/Commands/policy/enrollment/readme.md b/Commands/policy/enrollment/readme.md new file mode 100644 index 000000000..842d61047 --- /dev/null +++ b/Commands/policy/enrollment/readme.md @@ -0,0 +1,22 @@ +# [Group] _policy enrollment_ + +Manage policy enrollments. + +Policy exemptions specify resources that a policy assignment on 'Enroll' mode applies to. + +## Commands + +- [create](/Commands/policy/enrollment/_create.md) +: Create a policy enrollment. + +- [delete](/Commands/policy/enrollment/_delete.md) +: Delete a policy enrollment. + +- [list](/Commands/policy/enrollment/_list.md) +: Retrieve all applicable policy enrollments. + +- [show](/Commands/policy/enrollment/_show.md) +: Retrieve a policy enrollment. + +- [update](/Commands/policy/enrollment/_update.md) +: Update a policy enrollment. diff --git a/Commands/policy/exemption/_create.md b/Commands/policy/exemption/_create.md index 85049cc15..a3be0a9b2 100644 --- a/Commands/policy/exemption/_create.md +++ b/Commands/policy/exemption/_create.md @@ -6,9 +6,9 @@ Create a policy exemption with the given name and scope. Policy exemptions apply ## Versions -### [2022-07-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2022-07-01-preview.xml) **Stable** +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml) **Stable** - + #### examples diff --git a/Commands/policy/exemption/_delete.md b/Commands/policy/exemption/_delete.md index c51c0e60f..754a8504a 100644 --- a/Commands/policy/exemption/_delete.md +++ b/Commands/policy/exemption/_delete.md @@ -6,9 +6,9 @@ Delete the policy exemption with the given name and scope. ## Versions -### [2022-07-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2022-07-01-preview.xml) **Stable** +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml) **Stable** - + #### examples diff --git a/Commands/policy/exemption/_list.md b/Commands/policy/exemption/_list.md index 319d600c2..01fee6ee3 100644 --- a/Commands/policy/exemption/_list.md +++ b/Commands/policy/exemption/_list.md @@ -6,11 +6,11 @@ Retrieve the list of all policy assignments applicable to the given subscription ## Versions -### [2022-07-01-preview](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2022-07-01-preview.xml) **Stable** +### [2026-01-01-preview](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml) **Stable** - - - + + + #### examples diff --git a/Commands/policy/exemption/_show.md b/Commands/policy/exemption/_show.md index d639a6c24..3f020a53e 100644 --- a/Commands/policy/exemption/_show.md +++ b/Commands/policy/exemption/_show.md @@ -6,9 +6,9 @@ Retrieve and show the details of the policy exemption with the given name and sc ## Versions -### [2022-07-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2022-07-01-preview.xml) **Stable** +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml) **Stable** - + #### examples diff --git a/Commands/policy/exemption/_update.md b/Commands/policy/exemption/_update.md index cd703ba2d..7c58864a8 100644 --- a/Commands/policy/exemption/_update.md +++ b/Commands/policy/exemption/_update.md @@ -6,9 +6,9 @@ Update the policy exemption with the given name and scope by applying the given ## Versions -### [2022-07-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2022-07-01-preview.xml) **Stable** +### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml) **Stable** - + #### examples diff --git a/Commands/policy/readme.md b/Commands/policy/readme.md index 65820e687..50d95e97a 100644 --- a/Commands/policy/readme.md +++ b/Commands/policy/readme.md @@ -2,7 +2,7 @@ Manage resources defined and used by the Azure Policy service. -Azure Policy is an Azure service that offers APIs to manage Azure resources in a rule-based declarative way. The policy command group provides create, update, show and list commands for managing policy definitions, policy set definitions (also called policy initiatives), policy assignments, and policy exemptions. +Azure Policy is an Azure service that offers APIs to manage Azure resources in a rule-based declarative way. The policy command group provides create, update, show and list commands for managing policy definitions, policy set definitions (also called policy initiatives), policy assignments, policy exemptions, and policy enrollments. ## Subgroups @@ -12,6 +12,9 @@ Azure Policy is an Azure service that offers APIs to manage Azure resources in a - [definition](/Commands/policy/definition/readme.md) : Manage policy definitions. +- [enrollment](/Commands/policy/enrollment/readme.md) +: Manage policy enrollments. + - [exemption](/Commands/policy/exemption/readme.md) : Manage policy exemptions. diff --git a/Commands/policy/set-definition/_create.md b/Commands/policy/set-definition/_create.md index b7a8ba315..3e5901870 100644 --- a/Commands/policy/set-definition/_create.md +++ b/Commands/policy/set-definition/_create.md @@ -6,10 +6,10 @@ Create a policy set definition in the given subscription or management group wit ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples @@ -32,3 +32,8 @@ Create a policy set definition in the given subscription or management group wit ```bash policy set-definition create -n computeRequirements --definitions "[ { 'policyDefinitionId ': '/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/storagePolicy', 'groupNames': [ 'CostSaving', 'Organizational' ] }, { 'policyDefinitionId': '/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/tagPolicy', 'groupNames': [ 'Organizational' ] } ]" --definition-groups "[{ 'name': 'CostSaving' }, { 'name': 'Organizational' } ]" ``` + +- Create a policy set definition with newer version + ```bash + policy set-definition create -n readOnlyStorage --definitions "[ { 'policyDefinitionId': '/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}' } ]" --version 2.0.0 + ``` diff --git a/Commands/policy/set-definition/_delete.md b/Commands/policy/set-definition/_delete.md index 33d3823c8..bf8d72f24 100644 --- a/Commands/policy/set-definition/_delete.md +++ b/Commands/policy/set-definition/_delete.md @@ -6,10 +6,10 @@ Delete the policy set definition in the given subscription or management group w ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples diff --git a/Commands/policy/set-definition/_list.md b/Commands/policy/set-definition/_list.md index 813335931..60257856c 100644 --- a/Commands/policy/set-definition/_list.md +++ b/Commands/policy/set-definition/_list.md @@ -6,11 +6,11 @@ Retrieve the list of all policy set definitions in the given subscription or man ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml) **Stable** - - - + + + #### examples diff --git a/Commands/policy/set-definition/_show.md b/Commands/policy/set-definition/_show.md index dee6a3f62..614ffb933 100644 --- a/Commands/policy/set-definition/_show.md +++ b/Commands/policy/set-definition/_show.md @@ -6,10 +6,10 @@ Retrieve and show the details of the policy set definition in the given subscrip ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples diff --git a/Commands/policy/set-definition/_update.md b/Commands/policy/set-definition/_update.md index 53c72c93d..67b2d2bcc 100644 --- a/Commands/policy/set-definition/_update.md +++ b/Commands/policy/set-definition/_update.md @@ -6,10 +6,10 @@ Update the policy set definition in the given subscription or management group w ## Versions -### [2024-05-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2024-05-01.xml) **Stable** +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) **Stable** - - + + #### examples diff --git a/Commands/policy/set-definition/readme.md b/Commands/policy/set-definition/readme.md index 038fa5620..eb7ab96b8 100644 --- a/Commands/policy/set-definition/readme.md +++ b/Commands/policy/set-definition/readme.md @@ -4,6 +4,11 @@ Manage policy set definitions. Manage policy set definitions, which are collections of policy definitions. +## Subgroups + +- [version](/Commands/policy/set-definition/version/readme.md) +: Manage Version + ## Commands - [create](/Commands/policy/set-definition/_create.md) diff --git a/Commands/policy/set-definition/version/_create.md b/Commands/policy/set-definition/version/_create.md new file mode 100644 index 000000000..2c1fc225d --- /dev/null +++ b/Commands/policy/set-definition/version/_create.md @@ -0,0 +1,17 @@ +# [Command] _policy set-definition version create_ + +Create operation creates or updates a policy set definition version in the given management group with the given name and version. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + + +#### examples + +- Create a policy set definition with older version + ```bash + policy set-definition version create -n readOnlyStorage --definitions "[ { 'policyDefinitionId': '/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}' } ]" --version 1.1.0 + ``` diff --git a/Commands/policy/set-definition/version/_delete.md b/Commands/policy/set-definition/version/_delete.md new file mode 100644 index 000000000..e2c7a8e2d --- /dev/null +++ b/Commands/policy/set-definition/version/_delete.md @@ -0,0 +1,17 @@ +# [Command] _policy set-definition version delete_ + +Delete operation deletes the policy set definition version in the given management group with the given name and version. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + + +#### examples + +- Delete a policy set definition version + ```bash + policy set-definition version delete --name CostManagement --version 1.2.1 + ``` diff --git a/Commands/policy/set-definition/version/_list.md b/Commands/policy/set-definition/version/_list.md new file mode 100644 index 000000000..ba5e23b5b --- /dev/null +++ b/Commands/policy/set-definition/version/_list.md @@ -0,0 +1,18 @@ +# [Command] _policy set-definition version list_ + +List operation retrieves a list of all the built-in policy set definition versions for the given built-in policy set definition. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml) **Stable** + + + + + +#### examples + +- List policy set definitions + ```bash + policy set-definition version list --name CostManagement + ``` diff --git a/Commands/policy/set-definition/version/_show.md b/Commands/policy/set-definition/version/_show.md new file mode 100644 index 000000000..344bc368c --- /dev/null +++ b/Commands/policy/set-definition/version/_show.md @@ -0,0 +1,17 @@ +# [Command] _policy set-definition version show_ + +Get operation retrieves the policy set definition version in the given management group with the given name and version. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + + +#### examples + +- Retrieve a policy set definition version + ```bash + policy set-definition version show --name CostManagement --version 1.2.1 + ``` diff --git a/Commands/policy/set-definition/version/_update.md b/Commands/policy/set-definition/version/_update.md new file mode 100644 index 000000000..6ba7ea46a --- /dev/null +++ b/Commands/policy/set-definition/version/_update.md @@ -0,0 +1,10 @@ +# [Command] _policy set-definition version update_ + +Update operation creates or updates a policy set definition version in the given management group with the given name and version. + +## Versions + +### [2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) **Stable** + + + diff --git a/Commands/policy/set-definition/version/readme.md b/Commands/policy/set-definition/version/readme.md new file mode 100644 index 000000000..779c54df1 --- /dev/null +++ b/Commands/policy/set-definition/version/readme.md @@ -0,0 +1,20 @@ +# [Group] _policy set-definition version_ + +Manage Version + +## Commands + +- [create](/Commands/policy/set-definition/version/_create.md) +: Create operation creates or updates a policy set definition version in the given management group with the given name and version. + +- [delete](/Commands/policy/set-definition/version/_delete.md) +: Delete operation deletes the policy set definition version in the given management group with the given name and version. + +- [list](/Commands/policy/set-definition/version/_list.md) +: List operation retrieves a list of all the built-in policy set definition versions for the given built-in policy set definition. + +- [show](/Commands/policy/set-definition/version/_show.md) +: Get operation retrieves the policy set definition version in the given management group with the given name and version. + +- [update](/Commands/policy/set-definition/version/_update.md) +: Update operation creates or updates a policy set definition version in the given management group with the given name and version. diff --git a/Commands/readme.md b/Commands/readme.md index b65bc1241..8074157ed 100644 --- a/Commands/readme.md +++ b/Commands/readme.md @@ -177,7 +177,7 @@ : Manage Event Hub - [fileshare](/Commands/fileshare/readme.md) -: Manage Azure File Shares. +: Manage Azure File Shares - [firmwareanalysis](/Commands/firmwareanalysis/readme.md) : Commands to manage firmware analysis. @@ -287,6 +287,9 @@ - [playwright-testing](/Commands/playwright-testing/readme.md) : Manage Microsoft Playwright Testing service +- [policy](/Commands/policy/readme.md) +: Manage resources defined and used by the Azure Policy service. + - [portal](/Commands/portal/readme.md) : Manage Portal. diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json new file mode 100644 index 000000000..9c33d56d6 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name whose policy definitions are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupId"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyDefinitions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_ListBuiltIn"], "operationId": "PolicyDefinitions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_ListByManagementGroup"], "operationId": "PolicyDefinitions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_List"], "operationId": "PolicyDefinitions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml new file mode 100644 index 000000000..50c98166b --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml @@ -0,0 +1,439 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json new file mode 100644 index 000000000..7f7fe38b8 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_ListBuiltIn"], "operationId": "PolicyDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_ListByManagementGroup"], "operationId": "PolicyDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_List"], "operationId": "PolicyDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml new file mode 100644 index 000000000..4d602e9ed --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml @@ -0,0 +1,445 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json new file mode 100644 index 000000000..b1c8281ee --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name whose policy set definitions are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupId"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicySetDefinitions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_ListBuiltIn"], "operationId": "PolicySetDefinitions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_ListByManagementGroup"], "operationId": "PolicySetDefinitions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_List"], "operationId": "PolicySetDefinitions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml new file mode 100644 index 000000000..6a02fb3f5 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml @@ -0,0 +1,484 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json new file mode 100644 index 000000000..6331bf3f8 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_ListBuiltIn"], "operationId": "PolicySetDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_ListByManagementGroup"], "operationId": "PolicySetDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_List"], "operationId": "PolicySetDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml new file mode 100644 index 000000000..7ff2a27d0 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml @@ -0,0 +1,490 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json new file mode 100644 index 000000000..50f694403 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRz/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5QXNzaWdubWVudHM=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lBc3NpZ25tZW50cw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRz/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5QXNzaWdubWVudHM=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lBc3NpZ25tZW50cw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy assignments whose scope covers the management group with the given name are to be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy assignments whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyAssignments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyAssignments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}, {"var": "$Condition_PolicyAssignments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyAssignments_ListForManagementGroup"], "operationId": "PolicyAssignments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyAssignments_List"], "operationId": "PolicyAssignments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyAssignments_ListForResourceGroup"], "operationId": "PolicyAssignments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml new file mode 100644 index 000000000..9962287de --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml @@ -0,0 +1,561 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.md b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.md new file mode 100644 index 000000000..2cd0dd752 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policydefinitions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json new file mode 100644 index 000000000..94e454adb --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Delete"], "operationId": "PolicyDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml new file mode 100644 index 000000000..4d2016b39 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -0,0 +1,1329 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md new file mode 100644 index 000000000..a8d8e149f --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policydefinitions/{}/versions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json new file mode 100644 index 000000000..21bf717e0 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Delete"], "operationId": "PolicyDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml new file mode 100644 index 000000000..64990423e --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -0,0 +1,1367 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json new file mode 100644 index 000000000..7e19d72db --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group-id"], "help": {"short": "The management group ID."}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy enrollments whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "help": {"short": "The filter to apply on the operation. Valid values for $filter are: 'atScope()' or 'atExactScope()'. If $filter is not provided, no filtering is performed. If $filter is not provided, the unfiltered list includes all policy enrollments associated with the scope, including those that apply directly or from containing scopes. If $filter=atScope() is provided, the returned list includes all policy enrollments that apply to the scope, which is everything in the unfiltered list except those applied to sub-scopes contained within the given scope. If $filter=atExactScope() is provided, the returned list only includes all policy enrollments that apply at the given scope."}}]}], "conditions": [{"var": "$Condition_PolicyEnrollments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyEnrollments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyEnrollments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyEnrollments_ListForResourceGroup"], "operationId": "PolicyEnrollments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_ListForManagementGroup"], "operationId": "PolicyEnrollments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_List"], "operationId": "PolicyEnrollments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml new file mode 100644 index 000000000..14577f6ed --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml @@ -0,0 +1,380 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json new file mode 100644 index 000000000..64509f446 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy exemptions whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "idPart": "resource_group"}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}]}], "conditions": [{"var": "$Condition_PolicyExemptions_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyExemptions_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyExemptions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyExemptions_ListForResourceGroup"], "operationId": "PolicyExemptions_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_ListForManagementGroup"], "operationId": "PolicyExemptions_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_List"], "operationId": "PolicyExemptions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml new file mode 100644 index 000000000..dfb98c558 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml @@ -0,0 +1,399 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.md b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.md new file mode 100644 index 000000000..b60d417c0 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policysetdefinitions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json new file mode 100644 index 000000000..cba1cdd1b --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Delete"], "operationId": "PolicySetDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy set definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy set definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml new file mode 100644 index 000000000..7d8df5f8d --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -0,0 +1,1471 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md new file mode 100644 index 000000000..feccae29d --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policysetdefinitions/{}/versions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json new file mode 100644 index 000000000..59c7bb3e4 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Delete"], "operationId": "PolicySetDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The policy set definition parameters that can be used in policy definition references."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The policy set definition parameters that can be used in policy definition references."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml new file mode 100644 index 000000000..d65b53580 --- /dev/null +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -0,0 +1,1509 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md new file mode 100644 index 000000000..8d4cc7393 --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25z/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25z/2025-11-01.md new file mode 100644 index 000000000..2cd0dd752 --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25z/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policydefinitions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9/2025-11-01.md new file mode 100644 index 000000000..3b2f36c3e --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{} 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md new file mode 100644 index 000000000..a8d8e149f --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policydefinitions/{}/versions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md new file mode 100644 index 000000000..8df1c3ffa --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{} 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md new file mode 100644 index 000000000..93fbce6fb --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions 2026-01-01-preview](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md new file mode 100644 index 000000000..6150a1764 --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments 2026-01-01-preview](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25z/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25z/2025-11-01.md new file mode 100644 index 000000000..b60d417c0 --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25z/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policysetdefinitions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9/2025-11-01.md new file mode 100644 index 000000000..793d26962 --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{} 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md new file mode 100644 index 000000000..feccae29d --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25z/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.authorization/policysetdefinitions/{}/versions 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md new file mode 100644 index 000000000..4725b202e --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeXNldGRlZmluaXRpb25zL3t9L3ZlcnNpb25zL3t9/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{} 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md new file mode 100644 index 000000000..8d4cc7393 --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRz/2025-11-01.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments 2025-11-01](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md new file mode 100644 index 000000000..93fbce6fb --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnM=/2026-01-01-preview.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions 2026-01-01-preview](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml) diff --git a/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md new file mode 100644 index 000000000..6150a1764 --- /dev/null +++ b/Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRz/2026-01-01-preview.md @@ -0,0 +1 @@ +Reference [/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments 2026-01-01-preview](/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml) diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json new file mode 100644 index 000000000..e81b4411d --- /dev/null +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyAssignments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["assign-identity", "system-assigned", "mi-system-assigned"], "group": "Identity", "help": {"short": "Sets the system assigned managed identity.", "lines": ["Sets the system assigned managed identity of the policy assignment."]}}, {"type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Identity", "help": {"short": "Sets the user assigned managed identity.", "lines": ["Sets the user assigned managed identity of the policy assignment."]}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy override.", "lines": ["Array of objects that specify resource selector values to use for this assignment."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "@Selector_create"}}, {"type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "@Selector_create.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "@Selector_create.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"type": "array", "var": "@Selector_create.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}], "userAssigned": {"action": "create", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "create", "type": "string"}}, "systemAssigned": {"action": "create", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_create"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_create.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_create.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_create.notIn", "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"nullable": true, "type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"nullable": true, "type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"nullable": true, "blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy property value override."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"nullable": true, "type": "array<@Selector_update>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "@Selector_update"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "@Selector_update.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "@Selector_update.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"nullable": true, "type": "array", "var": "@Selector_update.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}], "cls": "Selector_update"}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"nullable": true, "type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"nullable": true, "type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}]}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_update>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_update"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_update.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_update.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_update.notIn", "item": {"type": "string"}}], "cls": "Selector_update"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}], "commandGroups": [{"name": "identity", "commands": [{"name": "assign", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "assign", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "assign", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "assign", "type": "string"}}, "systemAssigned": {"action": "assign", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "remove", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "remove", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "remove", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "remove", "type": "string"}}, "systemAssigned": {"action": "remove", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}, {"name": "non-compliance-message", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceCreate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceDelete": {"ref": "$Subresource", "json": {}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml new file mode 100644 index 000000000..2cacb5f77 --- /dev/null +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml @@ -0,0 +1,3078 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json new file mode 100644 index 000000000..28a97f8bc --- /dev/null +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyExemptions_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyExemptions_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The assignment scope validation", "lines": ["Indicates the type of validation to perform on the assignment scope. Valid values are Default, DoNotValidate."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy exemption description.", "lines": ["Full description of the policy exemption."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy exemption.", "lines": ["The display name of the policy exemption is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.exemptionCategory", "options": ["e", "exemption-category"], "group": "Properties", "help": {"short": "The policy exemption category.", "lines": ["The policy exemption category. Possible values are Mitigated and Waiver."]}, "enum": {"items": [{"name": "Mitigated", "value": "Mitigated"}, {"name": "Waiver", "value": "Waiver"}]}}, {"type": "dateTime", "var": "$parameters.properties.expiresOn", "options": ["expires-on"], "group": "Properties", "help": {"short": "The expiration date and time.", "lines": ["The expiration date and time of the policy exemption in UTC ISO 8601 format, e.g. yyyy-MM-ddTHH:mm:ssZ."]}, "format": {"protocol": "iso"}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy exemption metadata.", "lines": ["The policy exemption metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to exempt.", "lines": ["The resource ID of the policy assignment to exempt."]}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to exempt when the policy assignment is an assignment of a policy set definition."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy exemption applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyExemptions_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "string", "name": "exemptionCategory", "arg": "$parameters.properties.exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "arg": "$parameters.properties.expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "string", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The assignment scope validation", "lines": ["Indicates the type of validation to perform on the assignment scope. Valid values are Default, DoNotValidate."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy exemption description.", "lines": ["Full description of the policy exemption."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy exemption.", "lines": ["The display name of the policy exemption is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.exemptionCategory", "options": ["e", "exemption-category"], "group": "Properties", "help": {"short": "The policy exemption category.", "lines": ["The policy exemption category. Possible values are Mitigated and Waiver."]}, "enum": {"items": [{"name": "Mitigated", "value": "Mitigated"}, {"name": "Waiver", "value": "Waiver"}]}}, {"nullable": true, "type": "dateTime", "var": "$parameters.properties.expiresOn", "options": ["expires-on"], "group": "Properties", "help": {"short": "The expiration date and time.", "lines": ["The expiration date and time of the policy exemption in UTC ISO 8601 format, e.g. yyyy-MM-ddTHH:mm:ssZ."]}, "format": {"protocol": "iso"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy exemption metadata.", "lines": ["The policy exemption metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to exempt.", "lines": ["The resource ID of the policy assignment to exempt."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to exempt when the policy assignment is an assignment of a policy set definition."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy exemption applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyExemptions_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyExemption_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "string", "name": "exemptionCategory", "arg": "$parameters.properties.exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "arg": "$parameters.properties.expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "string", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyExemptions_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyExemption_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml new file mode 100644 index 000000000..43a16406f --- /dev/null +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml @@ -0,0 +1,707 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json new file mode 100644 index 000000000..217172eb6 --- /dev/null +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json @@ -0,0 +1 @@ +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml new file mode 100644 index 000000000..e7ca3db13 --- /dev/null +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml @@ -0,0 +1,657 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + From 046859b80ffaa4377bbb82c2a81c6440b6b176ad Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Fri, 15 May 2026 10:44:43 -0700 Subject: [PATCH 2/8] nit --- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json index 64509f446..02bc403d6 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy exemptions whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "idPart": "resource_group"}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}]}], "conditions": [{"var": "$Condition_PolicyExemptions_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyExemptions_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyExemptions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyExemptions_ListForResourceGroup"], "operationId": "PolicyExemptions_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_ListForManagementGroup"], "operationId": "PolicyExemptions_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_List"], "operationId": "PolicyExemptions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy exemptions whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group."}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}]}], "conditions": [{"var": "$Condition_PolicyExemptions_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyExemptions_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyExemptions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyExemptions_ListForResourceGroup"], "operationId": "PolicyExemptions_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_ListForManagementGroup"], "operationId": "PolicyExemptions_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_List"], "operationId": "PolicyExemptions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml index dfb98c558..33612a391 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml @@ -13,7 +13,9 @@ - + + + From f6e5d6d829dd6a3cad1e94a9084eaf0a9cf38075 Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Fri, 15 May 2026 13:19:58 -0700 Subject: [PATCH 3/8] Some more changes... --- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 40 +++++++++---------- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 28 ++++++------- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 8 ++-- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 2 +- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 8 ++-- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 20 +++++----- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 6 +-- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 4 +- 16 files changed, 66 insertions(+), 66 deletions(-) diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json index 94e454adb..33fedba3a 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Delete"], "operationId": "PolicyDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Delete"], "operationId": "PolicyDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml index 4d2016b39..46da34585 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -381,10 +381,10 @@ - + - + @@ -409,14 +409,14 @@ - + - - + + - - + + @@ -462,10 +462,10 @@ - + - + @@ -475,9 +475,9 @@ - + - + @@ -901,10 +901,10 @@ - + - + @@ -929,10 +929,10 @@ - + - - + + @@ -981,10 +981,10 @@ - + - + @@ -994,9 +994,9 @@ - + - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json index 21bf717e0..7782c6a62 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Delete"], "operationId": "PolicyDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["mode"], "group": "Properties", "help": {"short": "The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["policy-rule"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Delete"], "operationId": "PolicyDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml index 64990423e..fb8cc77ce 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -16,7 +16,7 @@ - + @@ -304,7 +304,7 @@ - + @@ -401,7 +401,7 @@ - + @@ -440,12 +440,12 @@ - - + + - - + + @@ -491,10 +491,10 @@ - + - + @@ -920,7 +920,7 @@ - + @@ -959,8 +959,8 @@ - - + + @@ -1009,10 +1009,10 @@ - + - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json index 7e19d72db..fb7b4c566 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group-id"], "help": {"short": "The management group ID."}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy enrollments whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "help": {"short": "The filter to apply on the operation. Valid values for $filter are: 'atScope()' or 'atExactScope()'. If $filter is not provided, no filtering is performed. If $filter is not provided, the unfiltered list includes all policy enrollments associated with the scope, including those that apply directly or from containing scopes. If $filter=atScope() is provided, the returned list includes all policy enrollments that apply to the scope, which is everything in the unfiltered list except those applied to sub-scopes contained within the given scope. If $filter=atExactScope() is provided, the returned list only includes all policy enrollments that apply at the given scope."}}]}], "conditions": [{"var": "$Condition_PolicyEnrollments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyEnrollments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyEnrollments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyEnrollments_ListForResourceGroup"], "operationId": "PolicyEnrollments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_ListForManagementGroup"], "operationId": "PolicyEnrollments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_List"], "operationId": "PolicyEnrollments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy enrollments whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy enrollments whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values for $filter are: 'atScope()' or 'atExactScope()'. If $filter is not provided, no filtering is performed. If $filter is not provided, the unfiltered list includes all policy enrollments associated with the scope, including those that apply directly or from containing scopes. If $filter=atScope() is provided, the returned list includes all policy enrollments that apply to the scope, which is everything in the unfiltered list except those applied to sub-scopes contained within the given scope. If $filter=atExactScope() is provided, the returned list only includes all policy enrollments that apply at the given scope."]}}]}], "conditions": [{"var": "$Condition_PolicyEnrollments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyEnrollments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyEnrollments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyEnrollments_ListForResourceGroup"], "operationId": "PolicyEnrollments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_ListForManagementGroup"], "operationId": "PolicyEnrollments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_List"], "operationId": "PolicyEnrollments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml index 14577f6ed..0056ceecc 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml @@ -9,8 +9,8 @@ - - + + @@ -19,8 +19,8 @@ - - + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json index 02bc403d6..9d3f32c4c 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy exemptions whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group."}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}]}], "conditions": [{"var": "$Condition_PolicyExemptions_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyExemptions_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyExemptions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyExemptions_ListForResourceGroup"], "operationId": "PolicyExemptions_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_ListForManagementGroup"], "operationId": "PolicyExemptions_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_List"], "operationId": "PolicyExemptions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy exemptions whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy exemptions whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}]}], "conditions": [{"var": "$Condition_PolicyExemptions_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyExemptions_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyExemptions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyExemptions_ListForResourceGroup"], "operationId": "PolicyExemptions_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_ListForManagementGroup"], "operationId": "PolicyExemptions_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_List"], "operationId": "PolicyExemptions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml index 33612a391..26b4f5448 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml @@ -14,7 +14,7 @@ - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json index cba1cdd1b..ec36e8add 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Delete"], "operationId": "PolicySetDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy set definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy set definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Delete"], "operationId": "PolicySetDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml index 7d8df5f8d..150fe3dcc 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -516,7 +516,7 @@ - + @@ -525,7 +525,7 @@ - + @@ -1103,7 +1103,7 @@ - + @@ -1112,7 +1112,7 @@ - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json index 59c7bb3e4..1106af86c 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Delete"], "operationId": "PolicySetDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The policy set definition parameters that can be used in policy definition references."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version in #.#.# format."}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The policy set definition parameters that can be used in policy definition references."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Delete"], "operationId": "PolicySetDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml index d65b53580..4c91483dd 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -12,7 +12,7 @@ - + @@ -331,7 +331,7 @@ - + @@ -428,7 +428,7 @@ - + @@ -449,8 +449,8 @@ - - + + @@ -544,7 +544,7 @@ - + @@ -1014,7 +1014,7 @@ - + @@ -1035,8 +1035,8 @@ - - + + @@ -1130,7 +1130,7 @@ - + diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json index e81b4411d..ac115b3ec 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyAssignments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["assign-identity", "system-assigned", "mi-system-assigned"], "group": "Identity", "help": {"short": "Sets the system assigned managed identity.", "lines": ["Sets the system assigned managed identity of the policy assignment."]}}, {"type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Identity", "help": {"short": "Sets the user assigned managed identity.", "lines": ["Sets the user assigned managed identity of the policy assignment."]}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy override.", "lines": ["Array of objects that specify resource selector values to use for this assignment."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "@Selector_create"}}, {"type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "@Selector_create.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "@Selector_create.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"type": "array", "var": "@Selector_create.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}], "userAssigned": {"action": "create", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "create", "type": "string"}}, "systemAssigned": {"action": "create", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_create"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_create.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_create.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_create.notIn", "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"nullable": true, "type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"nullable": true, "type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"nullable": true, "blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy property value override."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"nullable": true, "type": "array<@Selector_update>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "@Selector_update"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "@Selector_update.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "@Selector_update.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"nullable": true, "type": "array", "var": "@Selector_update.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}], "cls": "Selector_update"}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"nullable": true, "type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"nullable": true, "type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}]}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_update>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_update"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_update.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_update.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_update.notIn", "item": {"type": "string"}}], "cls": "Selector_update"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}], "commandGroups": [{"name": "identity", "commands": [{"name": "assign", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "assign", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "assign", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "assign", "type": "string"}}, "systemAssigned": {"action": "assign", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "remove", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "remove", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "remove", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "remove", "type": "string"}}, "systemAssigned": {"action": "remove", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}, {"name": "non-compliance-message", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceCreate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceDelete": {"ref": "$Subresource", "json": {}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyAssignments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["assign-identity", "system-assigned", "mi-system-assigned"], "group": "Identity", "help": {"short": "Sets the system assigned managed identity.", "lines": ["Sets the system assigned managed identity of the policy assignment."]}}, {"type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Identity", "help": {"short": "Sets the user assigned managed identity.", "lines": ["Sets the user assigned managed identity of the policy assignment."]}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy override.", "lines": ["Array of objects that specify resource selector values to use for this assignment."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "@Selector_create"}}, {"type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "@Selector_create.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "@Selector_create.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"type": "array", "var": "@Selector_create.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}], "userAssigned": {"action": "create", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "create", "type": "string"}}, "systemAssigned": {"action": "create", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_create"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_create.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_create.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_create.notIn", "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"nullable": true, "type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"nullable": true, "type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"nullable": true, "blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy property value override."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"nullable": true, "type": "array<@Selector_update>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "@Selector_update"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "@Selector_update.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "@Selector_update.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"nullable": true, "type": "array", "var": "@Selector_update.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}], "cls": "Selector_update"}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"nullable": true, "type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"nullable": true, "type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}]}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_update>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_update"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_update.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_update.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_update.notIn", "item": {"type": "string"}}], "cls": "Selector_update"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}], "commandGroups": [{"name": "identity", "commands": [{"name": "assign", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identity."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "assign", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "assign", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "assign", "type": "string"}}, "systemAssigned": {"action": "assign", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "remove", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Remove the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Remove the user managed identity."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "remove", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "remove", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "remove", "type": "string"}}, "systemAssigned": {"action": "remove", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}, {"name": "non-compliance-message", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceCreate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceDelete": {"ref": "$Subresource", "json": {}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml index 2cacb5f77..39da2c223 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml @@ -1300,7 +1300,7 @@ - + @@ -1542,11 +1542,11 @@ - + - + diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json index 217172eb6..c864b0bba 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml index e7ca3db13..2d462f6f8 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml @@ -172,7 +172,7 @@ - + @@ -400,7 +400,7 @@ - + From 33293ca40e641ff7ef65a49fc65f28c2a1769f9b Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Fri, 15 May 2026 14:07:21 -0700 Subject: [PATCH 4/8] enrollment changes --- Commands/policy/enrollment/_create.md | 17 +++++++++++++++++ Commands/policy/enrollment/_delete.md | 7 +++++++ Commands/policy/enrollment/_list.md | 17 +++++++++++++++++ Commands/policy/enrollment/_show.md | 7 +++++++ Commands/policy/enrollment/_update.md | 12 ++++++++++++ .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 16 ++++++++-------- 7 files changed, 69 insertions(+), 9 deletions(-) diff --git a/Commands/policy/enrollment/_create.md b/Commands/policy/enrollment/_create.md index 97cfea85a..27e4b1fe6 100644 --- a/Commands/policy/enrollment/_create.md +++ b/Commands/policy/enrollment/_create.md @@ -9,3 +9,20 @@ Create a policy enrollment with the given name and scope. Policy enrollments app ### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + +#### examples + +- Create a policy enrollment in default subscription + ```bash + policy enrollment create -n enrollTestVm --policy-assignment "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyAssignments/limitVMSku" + ``` + +- Create a policy enrollment in the resource group + ```bash + policy enrollment create -n enrollTestVm --policy-assignment "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyAssignments/limitVMSku" --resource-group MyResourceGroup + ``` + +- Create a policy enrollment in the management group + ```bash + az policy enrollment create -n enrollTestVm --policy-assignment "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyAssignments/limitVMSku" --scope "/providers/Microsoft.Management/managementGroups/{managementGroupName}" + ``` diff --git a/Commands/policy/enrollment/_delete.md b/Commands/policy/enrollment/_delete.md index 6b9e4a2b5..6466ecde2 100644 --- a/Commands/policy/enrollment/_delete.md +++ b/Commands/policy/enrollment/_delete.md @@ -9,3 +9,10 @@ Delete the policy enrollment with the given name and scope. ### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + +#### examples + +- Delete a policy enrollment + ```bash + policy enrollment delete --name MyPolicyEnrollment --resource-group "myResourceGroup" + ``` diff --git a/Commands/policy/enrollment/_list.md b/Commands/policy/enrollment/_list.md index ed4d3f329..2c0038aed 100644 --- a/Commands/policy/enrollment/_list.md +++ b/Commands/policy/enrollment/_list.md @@ -11,3 +11,20 @@ Retrieve the list of all policy enrollments applicable to the given resource gro + +#### examples + +- List policy enrollments for management group + ```bash + policy enrollment list --management-group DevOrg --filter atScopeAndBelow() + ``` + +- List policy enrollments for resource group + ```bash + policy enrollment list --resource-group TestResourceGroup + ``` + +- List policy enrollments for subscription + ```bash + policy enrollment list + ``` diff --git a/Commands/policy/enrollment/_show.md b/Commands/policy/enrollment/_show.md index d0b2416a0..613ff15b1 100644 --- a/Commands/policy/enrollment/_show.md +++ b/Commands/policy/enrollment/_show.md @@ -9,3 +9,10 @@ Retrieve and show the details of the policy enrollment with the given name and s ### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + +#### examples + +- Show a policy enrollment + ```bash + policy enrollment show --name MyPolicyEnrollment --resource-group "myResourceGroup" + ``` diff --git a/Commands/policy/enrollment/_update.md b/Commands/policy/enrollment/_update.md index 4d213d243..c6ea3bc99 100644 --- a/Commands/policy/enrollment/_update.md +++ b/Commands/policy/enrollment/_update.md @@ -9,3 +9,15 @@ Update the policy enrollment with the given name and scope by applying the given ### [2026-01-01-preview](/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml) **Stable** + +#### examples + +- Update a policy enrollment in a resource group + ```bash + policy enrollment update -n enrollTestVM --display-name "Updated display name" --resource-group myResourceGroup + ``` + +- Update a policy enrollment at scope + ```bash + policy enrollment update -n enrollTestVM --description "This enrollment is very cool." --scope "/providers/Microsoft.Management/managementGroups/{managementGroupName}" + ``` diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json index c864b0bba..4ba4dccdc 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["policy-assignment-id"], "group": "Properties", "help": {"short": "The ID of the policy assignment that is being enrolled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs for policy definitions in an assigned policy set definition. These IDs correspond to a subset of `policyDefinitions[*].policyDefinitionReferenceId` in the policy set definition. When specified and not empty, only the referenced policy definitions will be enrolled to. Otherwise, the entire policy set is enrolled to"}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to enroll.", "lines": ["The resource ID of the policy assignment to enroll."]}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to enroll when the policy assignment is an assignment of a policy set definition."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to enroll.", "lines": ["The resource ID of the policy assignment to enroll."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to enroll when the policy assignment is an assignment of a policy set definition."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml index 2d462f6f8..d341eb6e0 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml @@ -193,11 +193,11 @@ - - + + - - + + @@ -421,11 +421,11 @@ - - + + - - + + From 7d1b65483369ef073c6907451824444a0b0ad5d9 Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Fri, 15 May 2026 15:19:12 -0700 Subject: [PATCH 5/8] Fix example --- Commands/policy/definition/_create.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Commands/policy/definition/_create.md b/Commands/policy/definition/_create.md index 6f0a438cb..9f5453624 100644 --- a/Commands/policy/definition/_create.md +++ b/Commands/policy/definition/_create.md @@ -40,5 +40,5 @@ Create a policy definition in the given subscription or management group with th - Create a policy definition with external evaluation enforcement settings ```bash - policy definition create --name externalPolicy --rules "{ 'if': { 'value': '[claims().isValid]', 'equals': true }, 'then': { 'effect': 'deny' } }" --external-evaluation-enforcement-settings "{ 'roleDefinitionIds': [ '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c' ], 'endpointSettings': { 'kind': 'CoinFlip' } }" + policy definition create --name externalPolicy --rules "{ 'if': { 'value': '[claims().isValid]', 'equals': 'true' }, 'then': { 'effect': 'deny' } }" --external-evaluation-enforcement-settings "{ 'roleDefinitionIds': [ '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c' ], 'endpointSettings': { 'kind': 'CoinFlip' } }" ``` From c445a7159d0edd96ccecd4f5cf440f586f9f2149 Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Fri, 22 May 2026 10:49:38 -0700 Subject: [PATCH 6/8] Fixes --- Commands/policy/definition/_create.md | 2 +- Commands/policy/definition/version/_create.md | 2 +- Commands/policy/definition/version/_update.md | 7 + .../policy/set-definition/version/_update.md | 7 + .../2025-11-01.json | 2 +- .../2025-11-01.xml | 4 +- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 4 +- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 4 +- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 4 +- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 8 +- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 24 +-- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 164 +++++++++--------- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 44 +++-- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 44 +++-- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 16 +- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 28 ++- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 76 ++++---- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 18 +- .../2026-01-01-preview.json | 2 +- .../2026-01-01-preview.xml | 22 +-- 32 files changed, 234 insertions(+), 272 deletions(-) diff --git a/Commands/policy/definition/_create.md b/Commands/policy/definition/_create.md index 9f5453624..30aa4b42b 100644 --- a/Commands/policy/definition/_create.md +++ b/Commands/policy/definition/_create.md @@ -40,5 +40,5 @@ Create a policy definition in the given subscription or management group with th - Create a policy definition with external evaluation enforcement settings ```bash - policy definition create --name externalPolicy --rules "{ 'if': { 'value': '[claims().isValid]', 'equals': 'true' }, 'then': { 'effect': 'deny' } }" --external-evaluation-enforcement-settings "{ 'roleDefinitionIds': [ '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c' ], 'endpointSettings': { 'kind': 'CoinFlip' } }" + policy definition create --name externalPolicy --rules "{ 'if': { 'value': '[claims().isValid]', 'equals': 'true' }, 'then': { 'effect': 'deny' } }" --external-settings "{ 'roleDefinitionIds': [ '/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c' ], 'endpointSettings': { 'kind': 'CoinFlip' } }" ``` diff --git a/Commands/policy/definition/version/_create.md b/Commands/policy/definition/version/_create.md index 84164e3b0..20064aee4 100644 --- a/Commands/policy/definition/version/_create.md +++ b/Commands/policy/definition/version/_create.md @@ -13,7 +13,7 @@ Create a policy definition version in the given subscription or management group #### examples -- Create or update a policy definition version at management group level +- Create a policy definition with older version ```bash policy definition version create --name readOnlyStorage --rules "{ 'if': { 'field': 'type', 'equals': 'Microsoft.Storage/storageAccounts/write' }, 'then': { 'effect': 'deny' } }" --version 1.1.0 ``` diff --git a/Commands/policy/definition/version/_update.md b/Commands/policy/definition/version/_update.md index 3c3807c80..364e43c15 100644 --- a/Commands/policy/definition/version/_update.md +++ b/Commands/policy/definition/version/_update.md @@ -10,3 +10,10 @@ Update the policy definition version in the given subscription or management gro + +#### examples + +- Update a policy definition version + ```bash + policy definition version update -n readOnlyStorage --display-name "Updated display name goes here" + ``` diff --git a/Commands/policy/set-definition/version/_update.md b/Commands/policy/set-definition/version/_update.md index 6ba7ea46a..c5dc7f545 100644 --- a/Commands/policy/set-definition/version/_update.md +++ b/Commands/policy/set-definition/version/_update.md @@ -8,3 +8,10 @@ Update operation creates or updates a policy set definition version in the given + +#### examples + +- Update a policy set definition version + ```bash + az policy set-definition version update -n readOnlyStorage --display-name "Updated display name goes here" + ``` diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json index 9c33d56d6..ed844dc67 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name whose policy definitions are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupId"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyDefinitions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_ListBuiltIn"], "operationId": "PolicyDefinitions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_ListByManagementGroup"], "operationId": "PolicyDefinitions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_List"], "operationId": "PolicyDefinitions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name whose policy definitions are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupId"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyDefinitions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_ListBuiltIn"], "operationId": "PolicyDefinitions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_ListByManagementGroup"], "operationId": "PolicyDefinitions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_List"], "operationId": "PolicyDefinitions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml index 50c98166b..42f4573f0 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucw==/2025-11-01.xml @@ -12,9 +12,7 @@ - - - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json index 7f7fe38b8..8fc950a08 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_ListBuiltIn"], "operationId": "PolicyDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_ListByManagementGroup"], "operationId": "PolicyDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_List"], "operationId": "PolicyDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_ListBuiltIn"], "operationId": "PolicyDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_ListByManagementGroup"], "operationId": "PolicyDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_List"], "operationId": "PolicyDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml index 4d602e9ed..173071e35 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml @@ -17,9 +17,7 @@ - - - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json index b1c8281ee..653738a68 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name whose policy set definitions are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupId"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicySetDefinitions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_ListBuiltIn"], "operationId": "PolicySetDefinitions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_ListByManagementGroup"], "operationId": "PolicySetDefinitions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_List"], "operationId": "PolicySetDefinitions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnM=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name whose policy set definitions are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupId"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicySetDefinitions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_ListBuiltIn"], "operationId": "PolicySetDefinitions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_ListByManagementGroup"], "operationId": "PolicySetDefinitions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_List"], "operationId": "PolicySetDefinitions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml index 6a02fb3f5..d07ca2a45 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucw==/2025-11-01.xml @@ -12,9 +12,7 @@ - - - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json index 6331bf3f8..787d9bd8a 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_ListBuiltIn"], "operationId": "PolicySetDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_ListByManagementGroup"], "operationId": "PolicySetDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_List"], "operationId": "PolicySetDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_ListBuiltIn"], "operationId": "PolicySetDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_ListByManagementGroup"], "operationId": "PolicySetDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_List"], "operationId": "PolicySetDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml index 7ff2a27d0..4fc42f2f9 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml @@ -17,9 +17,7 @@ - - - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json index 50f694403..96aee4cfd 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRz/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5QXNzaWdubWVudHM=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lBc3NpZ25tZW50cw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRz/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5QXNzaWdubWVudHM=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lBc3NpZ25tZW50cw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy assignments whose scope covers the management group with the given name are to be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy assignments whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyAssignments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyAssignments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}, {"var": "$Condition_PolicyAssignments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyAssignments_ListForManagementGroup"], "operationId": "PolicyAssignments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyAssignments_List"], "operationId": "PolicyAssignments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyAssignments_ListForResourceGroup"], "operationId": "PolicyAssignments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRz/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5QXNzaWdubWVudHM=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lBc3NpZ25tZW50cw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRz/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5QXNzaWdubWVudHM=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyassignments", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lBc3NpZ25tZW50cw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy assignments whose scope covers the management group with the given name are to be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "idPart": "resource_group"}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "hide": true, "group": "", "help": {"short": "Maximum number of items to include in the list. If not provided, the list will be limited to 500 items."}, "configurationKey": "Maximum items to list.", "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyAssignments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyAssignments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}, {"var": "$Condition_PolicyAssignments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyAssignments_ListForManagementGroup"], "operationId": "PolicyAssignments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyAssignments_List"], "operationId": "PolicyAssignments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyAssignments_ListForResourceGroup"], "operationId": "PolicyAssignments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyAssignments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "string", "name": "$filter", "arg": "$Query.filter"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml index 9962287de..c3388cb05 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lhc3NpZ25tZW50cw==/2025-11-01.xml @@ -13,12 +13,8 @@ - - - - - - + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json index 33fedba3a..f469bddee 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Delete"], "operationId": "PolicyDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Delete"], "operationId": "PolicyDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml index 46da34585..100384ef5 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -14,9 +14,7 @@ - - - + @@ -293,9 +291,7 @@ - - - + @@ -375,9 +371,7 @@ - - - + @@ -386,7 +380,7 @@ - + @@ -895,9 +889,7 @@ - - - + @@ -906,7 +898,7 @@ - + @@ -934,8 +926,8 @@ - - + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json index 7782c6a62..4065f9235 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Delete"], "operationId": "PolicyDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "idPart": "name", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "idPart": "child_name_1", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["parameters"], "group": "Properties", "help": {"short": "The parameter definitions for parameters used in the policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Delete"], "operationId": "PolicyDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The parameter definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml index fb8cc77ce..cb5c35899 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -11,43 +11,43 @@ - + - + - - - + - + + - - + - + - - + + + + + - @@ -162,19 +162,17 @@ - - + + - - - + @@ -299,43 +297,43 @@ - + - + - - - + - + + - - + - + - - + + + + + - @@ -355,19 +353,17 @@ - - + + - - - + @@ -396,17 +392,15 @@ - + - + - - - + @@ -415,7 +409,7 @@ - + @@ -438,7 +432,7 @@ - + @@ -507,31 +501,33 @@ - + + - - + - + - - + + + + + - @@ -712,19 +708,17 @@ - - + + - - - + @@ -915,17 +909,15 @@ - + - + - - - + @@ -934,7 +926,7 @@ - + @@ -957,13 +949,13 @@ - + - - + + @@ -1025,13 +1017,6 @@ - - - - - - - @@ -1039,7 +1024,7 @@ - + @@ -1053,17 +1038,26 @@ - - + + + + + + + + + + + + - @@ -1178,19 +1172,17 @@ - - + + - - - + @@ -1283,17 +1275,19 @@ - - + + + + + - @@ -1321,19 +1315,17 @@ - - + + - - - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json index fb7b4c566..0730f0ac2 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy enrollments whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy enrollments whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values for $filter are: 'atScope()' or 'atExactScope()'. If $filter is not provided, no filtering is performed. If $filter is not provided, the unfiltered list includes all policy enrollments associated with the scope, including those that apply directly or from containing scopes. If $filter=atScope() is provided, the returned list includes all policy enrollments that apply to the scope, which is everything in the unfiltered list except those applied to sub-scopes contained within the given scope. If $filter=atExactScope() is provided, the returned list only includes all policy enrollments that apply at the given scope."]}}]}], "conditions": [{"var": "$Condition_PolicyEnrollments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyEnrollments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyEnrollments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyEnrollments_ListForResourceGroup"], "operationId": "PolicyEnrollments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_ListForManagementGroup"], "operationId": "PolicyEnrollments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_List"], "operationId": "PolicyEnrollments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRz/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RW5yb2xsbWVudHM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyenrollments", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFbnJvbGxtZW50cw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy enrollments whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "idPart": "resource_group"}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values for $filter are: 'atScope()' or 'atExactScope()'. If $filter is not provided, no filtering is performed. If $filter is not provided, the unfiltered list includes all policy enrollments associated with the scope, including those that apply directly or from containing scopes. If $filter=atScope() is provided, the returned list includes all policy enrollments that apply to the scope, which is everything in the unfiltered list except those applied to sub-scopes contained within the given scope. If $filter=atExactScope() is provided, the returned list only includes all policy enrollments that apply at the given scope."]}}]}], "conditions": [{"var": "$Condition_PolicyEnrollments_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyEnrollments_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}, {"var": "$Condition_PolicyEnrollments_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyEnrollments_ListForManagementGroup"], "operationId": "PolicyEnrollments_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_List"], "operationId": "PolicyEnrollments_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyEnrollments_ListForResourceGroup"], "operationId": "PolicyEnrollments_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyEnrollments", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml index 0056ceecc..b35065815 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3llbnJvbGxtZW50cw==/2026-01-01-preview.xml @@ -13,22 +13,12 @@ - - - - - - + + - - - - - - @@ -42,14 +32,19 @@ - - + + + + + + + + - - + + - @@ -154,13 +149,11 @@ - - + + - - - + @@ -265,10 +258,13 @@ - - + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json index 9d3f32c4c..d44927941 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy exemptions whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "group": "", "idPart": "resource_group", "help": {"short": "The resource group.", "lines": ["Indicates that policy exemptions whose scope covers the resource group with the given name are to be listed."]}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}]}], "conditions": [{"var": "$Condition_PolicyExemptions_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyExemptions_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyExemptions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}], "operations": [{"when": ["$Condition_PolicyExemptions_ListForResourceGroup"], "operationId": "PolicyExemptions_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_ListForManagementGroup"], "operationId": "PolicyExemptions_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_List"], "operationId": "PolicyExemptions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "list", "version": "2026-01-01-preview", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnM=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RXhlbXB0aW9ucw==/V/MjAyNi0wMS0wMS1wcmV2aWV3"}, {"id": "/subscriptions/{}/resourcegroups/{}/providers/microsoft.authorization/policyexemptions", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lFeGVtcHRpb25z/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["Indicates that policy exemptions whose scope covers the management group with the given name should be listed."]}, "format": {"minLength": 1}}, {"type": "ResourceGroupName", "var": "$Path.resourceGroupName", "options": ["g", "resource-group"], "idPart": "resource_group"}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.filter", "options": ["filter"], "group": "", "help": {"short": "Filter list results.", "lines": ["The filter to limit list results. Valid values are: 'atScope()', 'atExactScope()', 'atScopeAndBelow()' or 'policyDefinitionId eq '{value}''. If filter is not provided, no filtering is performed. If filter atScope() is provided, the returned list includes all policy assignments that apply to the given scope, which is everything in the unfiltered list except those applied to sub scopes contained within the given scope. If filter atExactScope() is provided, the returned list includes all policy assignments at the given scope. If filter atScopeAndBelow() is provided, the returned list includes all policy assignments at the given scope and those in sub scopes contained within the given scope. If filter policyDefinitionId eq '{value}' is provided, the returned list includes all policy assignments of the policy definition whose id is {value}."]}}]}], "conditions": [{"var": "$Condition_PolicyExemptions_ListForManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}]}}, {"var": "$Condition_PolicyExemptions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.subscriptionId"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.resourceGroupName"}}]}}, {"var": "$Condition_PolicyExemptions_ListForResourceGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.resourceGroupName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyExemptions_ListForManagementGroup"], "operationId": "PolicyExemptions_ListForManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true, "format": {"minLength": 1}}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_List"], "operationId": "PolicyExemptions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyExemptions_ListForResourceGroup"], "operationId": "PolicyExemptions_ListForResourceGroup", "http": {"path": "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Authorization/policyExemptions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "resourceGroupName", "arg": "$Path.resourceGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$filter", "arg": "$Query.filter"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml index 26b4f5448..7c42a252c 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lleGVtcHRpb25z/2026-01-01-preview.xml @@ -13,22 +13,12 @@ - - - - - - + + - - - - - - @@ -42,14 +32,19 @@ - - + + + + + + + + - - + + - @@ -161,13 +156,11 @@ - - + + - - - + @@ -279,10 +272,13 @@ - - + + + + + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json index ec36e8add..f20b9e6f3 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Delete"], "operationId": "PolicySetDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Delete"], "operationId": "PolicySetDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml index 150fe3dcc..2494d1aed 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -14,9 +14,7 @@ - - - + @@ -324,9 +322,7 @@ - - - + @@ -406,9 +402,7 @@ - - - + @@ -993,9 +987,7 @@ - - - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json index 1106af86c..18cd59f04 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Delete"], "operationId": "PolicySetDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "group": "", "idPart": "subscription", "help": {"short": "The subscription name or ID."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["policy-definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["policy-definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Delete"], "operationId": "PolicySetDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml index 4c91483dd..fe173d124 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -19,9 +19,7 @@ - - - + @@ -338,9 +336,7 @@ - - - + @@ -435,9 +431,7 @@ - - - + @@ -447,7 +441,7 @@ - + @@ -496,7 +490,7 @@ - + @@ -516,7 +510,7 @@ - + @@ -1021,9 +1015,7 @@ - - - + @@ -1033,7 +1025,7 @@ - + @@ -1082,7 +1074,7 @@ - + @@ -1102,7 +1094,7 @@ - + diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json index ac115b3ec..8a3fca9bc 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyAssignments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["assign-identity", "system-assigned", "mi-system-assigned"], "group": "Identity", "help": {"short": "Sets the system assigned managed identity.", "lines": ["Sets the system assigned managed identity of the policy assignment."]}}, {"type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Identity", "help": {"short": "Sets the user assigned managed identity.", "lines": ["Sets the user assigned managed identity of the policy assignment."]}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy override.", "lines": ["Array of objects that specify resource selector values to use for this assignment."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "@Selector_create"}}, {"type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "@Selector_create.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "@Selector_create.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"type": "array", "var": "@Selector_create.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}], "userAssigned": {"action": "create", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "create", "type": "string"}}, "systemAssigned": {"action": "create", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_create"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_create.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_create.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_create.notIn", "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"nullable": true, "type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"nullable": true, "type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"nullable": true, "blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy property value override."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"nullable": true, "type": "array<@Selector_update>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "@Selector_update"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "@Selector_update.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "@Selector_update.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"nullable": true, "type": "array", "var": "@Selector_update.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}], "cls": "Selector_update"}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"nullable": true, "type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"nullable": true, "type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}]}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_update>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_update"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_update.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_update.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_update.notIn", "item": {"type": "string"}}], "cls": "Selector_update"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}], "commandGroups": [{"name": "identity", "commands": [{"name": "assign", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identity."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "assign", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "assign", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "assign", "type": "string"}}, "systemAssigned": {"action": "assign", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "remove", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Remove the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Remove the user managed identity."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "remove", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "remove", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "remove", "type": "string"}}, "systemAssigned": {"action": "remove", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}, {"name": "non-compliance-message", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceCreate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceDelete": {"ref": "$Subresource", "json": {}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyAssignments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["assign-identity", "system-assigned", "mi-system-assigned"], "group": "Identity", "help": {"short": "Sets the system assigned managed identity.", "lines": ["Sets the system assigned managed identity of the policy assignment."]}}, {"type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Identity", "help": {"short": "Sets the user assigned managed identity.", "lines": ["Sets the user assigned managed identity of the policy assignment."]}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy override.", "lines": ["Array of objects that specify resource selector values to use for this assignment."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "@Selector_create"}}, {"type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "@Selector_create.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "@Selector_create.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"type": "array", "var": "@Selector_create.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve", "self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}], "userAssigned": {"action": "create", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "create", "type": "string"}}, "systemAssigned": {"action": "create", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_create"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_create.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_create.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_create.notIn", "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"nullable": true, "type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"nullable": true, "type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"nullable": true, "blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy property value override."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"nullable": true, "type": "array<@Selector_update>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "@Selector_update"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "@Selector_update.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "@Selector_update.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"nullable": true, "type": "array", "var": "@Selector_update.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}], "cls": "Selector_update"}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve", "self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"nullable": true, "type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"nullable": true, "type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}]}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_update>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_update"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_update.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_update.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_update.notIn", "item": {"type": "string"}}], "cls": "Selector_update"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}], "commandGroups": [{"name": "identity", "commands": [{"name": "assign", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "assign", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "assign", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "assign", "type": "string"}}, "systemAssigned": {"action": "assign", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}, {"name": "remove", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "remove", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "remove", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "remove", "type": "string"}}, "systemAssigned": {"action": "remove", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}]}, {"name": "non-compliance-message", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceCreate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceDelete": {"ref": "$Subresource", "json": {}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml index 39da2c223..28af93ddc 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml @@ -7,7 +7,7 @@ - + @@ -21,7 +21,7 @@ - + @@ -194,7 +194,7 @@ - + @@ -205,7 +205,7 @@ - + @@ -377,7 +377,7 @@ - + @@ -512,7 +512,7 @@ - + @@ -541,7 +541,7 @@ - + @@ -820,7 +820,7 @@ - + @@ -945,7 +945,7 @@ - + @@ -974,7 +974,7 @@ - + @@ -1249,7 +1249,7 @@ - + @@ -1282,12 +1282,12 @@ - + - + @@ -1300,7 +1300,7 @@ - + @@ -1314,7 +1314,7 @@ - + @@ -1496,7 +1496,7 @@ - + @@ -1528,12 +1528,12 @@ - + - + @@ -1542,11 +1542,11 @@ - + - + @@ -1560,7 +1560,7 @@ - + @@ -1742,7 +1742,7 @@ - + @@ -1774,12 +1774,12 @@ - + - + @@ -1795,7 +1795,7 @@ - + @@ -1969,7 +1969,7 @@ - + @@ -1985,7 +1985,7 @@ - + @@ -2157,7 +2157,7 @@ - + @@ -2183,7 +2183,7 @@ - + @@ -2363,7 +2363,7 @@ - + @@ -2400,7 +2400,7 @@ - + @@ -2426,7 +2426,7 @@ - + @@ -2606,7 +2606,7 @@ - + @@ -2643,7 +2643,7 @@ - + @@ -2669,7 +2669,7 @@ - + @@ -2844,7 +2844,7 @@ - + @@ -2880,7 +2880,7 @@ - + @@ -2906,7 +2906,7 @@ - + diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json index 28a97f8bc..ec0cdb702 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyExemptions_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyExemptions_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The assignment scope validation", "lines": ["Indicates the type of validation to perform on the assignment scope. Valid values are Default, DoNotValidate."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy exemption description.", "lines": ["Full description of the policy exemption."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy exemption.", "lines": ["The display name of the policy exemption is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.exemptionCategory", "options": ["e", "exemption-category"], "group": "Properties", "help": {"short": "The policy exemption category.", "lines": ["The policy exemption category. Possible values are Mitigated and Waiver."]}, "enum": {"items": [{"name": "Mitigated", "value": "Mitigated"}, {"name": "Waiver", "value": "Waiver"}]}}, {"type": "dateTime", "var": "$parameters.properties.expiresOn", "options": ["expires-on"], "group": "Properties", "help": {"short": "The expiration date and time.", "lines": ["The expiration date and time of the policy exemption in UTC ISO 8601 format, e.g. yyyy-MM-ddTHH:mm:ssZ."]}, "format": {"protocol": "iso"}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy exemption metadata.", "lines": ["The policy exemption metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to exempt.", "lines": ["The resource ID of the policy assignment to exempt."]}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to exempt when the policy assignment is an assignment of a policy set definition."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy exemption applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyExemptions_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "string", "name": "exemptionCategory", "arg": "$parameters.properties.exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "arg": "$parameters.properties.expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "string", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The assignment scope validation", "lines": ["Indicates the type of validation to perform on the assignment scope. Valid values are Default, DoNotValidate."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy exemption description.", "lines": ["Full description of the policy exemption."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy exemption.", "lines": ["The display name of the policy exemption is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.exemptionCategory", "options": ["e", "exemption-category"], "group": "Properties", "help": {"short": "The policy exemption category.", "lines": ["The policy exemption category. Possible values are Mitigated and Waiver."]}, "enum": {"items": [{"name": "Mitigated", "value": "Mitigated"}, {"name": "Waiver", "value": "Waiver"}]}}, {"nullable": true, "type": "dateTime", "var": "$parameters.properties.expiresOn", "options": ["expires-on"], "group": "Properties", "help": {"short": "The expiration date and time.", "lines": ["The expiration date and time of the policy exemption in UTC ISO 8601 format, e.g. yyyy-MM-ddTHH:mm:ssZ."]}, "format": {"protocol": "iso"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy exemption metadata.", "lines": ["The policy exemption metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to exempt.", "lines": ["The resource ID of the policy assignment to exempt."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to exempt when the policy assignment is an assignment of a policy set definition."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy exemption applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyExemptions_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyExemption_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "string", "name": "exemptionCategory", "arg": "$parameters.properties.exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "arg": "$parameters.properties.expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "string", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyExemptions_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyExemption_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy exemption", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyExemptions_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyExemptions_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The assignment scope validation", "lines": ["Indicates the type of validation to perform on the assignment scope. Valid values are Default, DoNotValidate."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy exemption description.", "lines": ["Full description of the policy exemption."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy exemption.", "lines": ["The display name of the policy exemption is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.exemptionCategory", "options": ["e", "exemption-category"], "group": "Properties", "help": {"short": "The policy exemption category.", "lines": ["The policy exemption category. Possible values are Mitigated and Waiver."]}, "enum": {"items": [{"name": "Mitigated", "value": "Mitigated"}, {"name": "Waiver", "value": "Waiver"}]}}, {"type": "dateTime", "var": "$parameters.properties.expiresOn", "options": ["expires-on"], "group": "Properties", "help": {"short": "The expiration date and time.", "lines": ["The expiration date and time of the policy exemption in UTC ISO 8601 format, e.g. yyyy-MM-ddTHH:mm:ssZ."]}, "format": {"protocol": "iso"}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy exemption metadata.", "lines": ["The policy exemption metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to exempt.", "lines": ["The resource ID of the policy assignment to exempt."]}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to exempt when the policy assignment is an assignment of a policy set definition."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy exemption applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyExemptions_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "string", "name": "exemptionCategory", "arg": "$parameters.properties.exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "arg": "$parameters.properties.expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "string", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyexemptions/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUV4ZW1wdGlvbnMve3BvbGljeUV4ZW1wdGlvbk5hbWV9/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyExemptionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy exemption."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The assignment scope validation", "lines": ["Indicates the type of validation to perform on the assignment scope. Valid values are Default, DoNotValidate."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy exemption description.", "lines": ["Full description of the policy exemption."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy exemption.", "lines": ["The display name of the policy exemption is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.exemptionCategory", "options": ["e", "exemption-category"], "group": "Properties", "help": {"short": "The policy exemption category.", "lines": ["The policy exemption category. Possible values are Mitigated and Waiver."]}, "enum": {"items": [{"name": "Mitigated", "value": "Mitigated"}, {"name": "Waiver", "value": "Waiver"}]}}, {"nullable": true, "type": "dateTime", "var": "$parameters.properties.expiresOn", "options": ["expires-on"], "group": "Properties", "help": {"short": "The expiration date and time.", "lines": ["The expiration date and time of the policy exemption in UTC ISO 8601 format, e.g. yyyy-MM-ddTHH:mm:ssZ."]}, "format": {"protocol": "iso"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy exemption metadata.", "lines": ["The policy exemption metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to exempt.", "lines": ["The resource ID of the policy assignment to exempt."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to exempt when the policy assignment is an assignment of a policy set definition."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy exemption applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyExemptions_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata"}, {"type": "string", "name": "policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyExemption_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "string", "name": "exemptionCategory", "arg": "$parameters.properties.exemptionCategory", "required": true, "enum": {"items": [{"value": "Mitigated"}, {"value": "Waiver"}]}}, {"type": "dateTime", "name": "expiresOn", "arg": "$parameters.properties.expiresOn", "format": {"protocol": "iso"}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "string", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}, "identifiers": ["name"]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyExemptions_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyExemptions/{policyExemptionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyExemptionName", "arg": "$Path.policyExemptionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyExemption_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml index 43a16406f..6ec473cdc 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWV4ZW1wdGlvbnMve30=/2026-01-01-preview.xml @@ -7,7 +7,7 @@ - + @@ -18,7 +18,7 @@ - + @@ -133,7 +133,7 @@ - + @@ -144,7 +144,7 @@ - + @@ -172,7 +172,7 @@ - + @@ -252,7 +252,7 @@ - + @@ -422,7 +422,7 @@ - + @@ -501,7 +501,7 @@ - + @@ -671,7 +671,7 @@ - + diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json index 4ba4dccdc..2805777ce 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to enroll.", "lines": ["The resource ID of the policy assignment to enroll."]}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to enroll when the policy assignment is an assignment of a policy set definition."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to enroll.", "lines": ["The resource ID of the policy assignment to enroll."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to enroll when the policy assignment is an assignment of a policy set definition."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "commandGroups": [{"name": "policy enrollment", "commands": [{"name": "show", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}], "operations": [{"operationId": "PolicyEnrollments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to enroll.", "lines": ["The resource ID of the policy assignment to enroll."]}}, {"type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to enroll when the policy assignment is an assignment of a policy set definition."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2026-01-01-preview", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyenrollments/{}", "version": "2026-01-01-preview", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUVucm9sbG1lbnRzL3twb2xpY3lFbnJvbGxtZW50TmFtZX0=/V/MjAyNi0wMS0wMS1wcmV2aWV3"}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyEnrollmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy enrollment."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "help": {"short": "The fully qualified Azure Resource manager identifier of the resource."}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "string", "var": "$parameters.eTag", "options": ["e-tag"], "hide": true, "group": "Parameters", "help": {"short": "The ETag for the policy enrollment."}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentScopeValidation", "options": ["v", "assignment-scope-validation"], "group": "Properties", "help": {"short": "The option whether to validate the enrollment is at or under the assignment scope."}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotValidate", "value": "DoNotValidate"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The description of the policy enrollment."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy enrollment."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy enrollment metadata. Metadata is an open ended object and is typically a collection of key value pairs."}}, {"type": "ResourceId", "var": "$parameters.properties.policyAssignmentId", "options": ["a", "policy-assignment"], "group": "Properties", "help": {"short": "The policy assignment to enroll.", "lines": ["The resource ID of the policy assignment to enroll."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionReferenceIds", "options": ["r", "policy-definition-reference-ids"], "group": "Properties", "help": {"short": "The policy definition reference IDs.", "lines": ["The collection of policy definition reference IDs to enroll when the policy assignment is an assignment of a policy set definition."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selector list to filter policies by resource properties."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].selectors[].kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "groupPrincipalId", "value": "groupPrincipalId"}, {"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}, {"name": "userPrincipalId", "value": "userPrincipalId"}]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors[].notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}]}}]}}]}], "operations": [{"operationId": "PolicyEnrollments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "eTag"}, {"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{}"}}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "required": true}, {"readOnly": true, "type": "uuid", "name": "policyAssignmentInstanceId"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "string", "name": "eTag", "arg": "$parameters.eTag"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentScopeValidation", "arg": "$parameters.properties.assignmentScopeValidation", "enum": {"items": [{"value": "Default"}, {"value": "DoNotValidate"}]}}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "ResourceId", "name": "policyAssignmentId", "arg": "$parameters.properties.policyAssignmentId", "required": true}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.policyDefinitionReferenceIds", "item": {"type": "string"}}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "$parameters.properties.resourceSelectors[].selectors[].in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "$parameters.properties.resourceSelectors[].selectors[].kind", "enum": {"items": [{"value": "groupPrincipalId"}, {"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}, {"value": "userPrincipalId"}]}}, {"type": "array", "name": "notIn", "arg": "$parameters.properties.resourceSelectors[].selectors[].notIn", "item": {"type": "string"}}]}}]}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyEnrollments_CreateOrUpdate", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyEnrollments/{policyEnrollmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyEnrollmentName", "arg": "$Path.policyEnrollmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2026-01-01-preview"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyEnrollment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml index d341eb6e0..d0339f222 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWVucm9sbG1lbnRzL3t9/2026-01-01-preview.xml @@ -7,7 +7,7 @@ - + @@ -18,7 +18,7 @@ - + @@ -126,7 +126,7 @@ - + @@ -137,7 +137,7 @@ - + @@ -165,7 +165,7 @@ - + @@ -177,7 +177,7 @@ - + @@ -238,7 +238,7 @@ - + @@ -393,7 +393,7 @@ - + @@ -405,7 +405,7 @@ - + @@ -466,7 +466,7 @@ - + @@ -621,7 +621,7 @@ - + From 615e8ef7fa7ba00b12af88510bf8f3a84a93bf86 Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Fri, 22 May 2026 12:56:02 -0700 Subject: [PATCH 7/8] Fix name --- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 8 +++--- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 8 +++--- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 28 +++++++++---------- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 28 +++++++++---------- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 28 +++++++++---------- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 28 +++++++++---------- 12 files changed, 70 insertions(+), 70 deletions(-) diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json index 8fc950a08..74a8b4da6 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_ListBuiltIn"], "operationId": "PolicyDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_ListByManagementGroup"], "operationId": "PolicyDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_List"], "operationId": "PolicyDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lEZWZpbml0aW9ucy97cG9saWN5RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicyDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_ListBuiltIn"], "operationId": "PolicyDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_ListByManagementGroup"], "operationId": "PolicyDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_List"], "operationId": "PolicyDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml index 173071e35..f0329d8a3 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml @@ -15,7 +15,7 @@ - + @@ -51,7 +51,7 @@ - + @@ -183,7 +183,7 @@ - + @@ -312,7 +312,7 @@ - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json index 787d9bd8a..73942bddb 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_ListBuiltIn"], "operationId": "PolicySetDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_ListByManagementGroup"], "operationId": "PolicySetDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_List"], "operationId": "PolicySetDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9wb2xpY3lTZXREZWZpbml0aW9ucy97cG9saWN5U2V0RGVmaW5pdGlvbk5hbWV9L3ZlcnNpb25z/V/MjAyNS0xMS0wMQ=="}, {"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucw==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}, {"type": "integer32", "var": "$Query.top", "options": ["top"], "help": {"short": "Maximum number of records to return. When the $top filter is not provided, it will return 500 records."}, "format": {"maximum": 1000, "minimum": 1}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_ListBuiltIn", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.managementGroupName"}}, {"type": "not", "operator": {"type": "hasValue", "arg": "$Path.subscriptionId"}}]}}, {"var": "$Condition_PolicySetDefinitionVersions_ListByManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_List", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_ListBuiltIn"], "operationId": "PolicySetDefinitionVersions_ListBuiltIn", "http": {"path": "/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_ListByManagementGroup"], "operationId": "PolicySetDefinitionVersions_ListByManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_List"], "operationId": "PolicySetDefinitionVersions_List", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}, {"type": "integer32", "name": "$top", "arg": "$Query.top", "format": {"maximum": 1000, "minimum": 1}}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"type": "string", "name": "nextLink"}, {"type": "array", "name": "value", "required": true, "item": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Instance.value", "clientFlatten": true, "nextLink": "$Instance.nextLink"}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml index 4fc42f2f9..fed9f8393 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucw==/2025-11-01.xml @@ -15,7 +15,7 @@ - + @@ -54,7 +54,7 @@ - + @@ -200,7 +200,7 @@ - + @@ -343,7 +343,7 @@ - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json index f469bddee..2c21790a5 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Delete"], "operationId": "PolicyDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Delete"], "operationId": "PolicyDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeURlZmluaXRpb25zL3twb2xpY3lEZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy definition resides."]}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy definition description.", "lines": ["Full description of the policy definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition.", "lines": ["The display name of the policy definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicyDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}]}}, {"var": "$Condition_PolicyDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitions_GetAtManagementGroup"], "operationId": "PolicyDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_Get"], "operationId": "PolicyDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitions_CreateOrUpdate"], "operationId": "PolicyDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml index 100384ef5..c4e4caee3 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -12,7 +12,7 @@ - + @@ -34,7 +34,7 @@ - + @@ -158,7 +158,7 @@ - + @@ -289,7 +289,7 @@ - + @@ -311,7 +311,7 @@ - + @@ -337,7 +337,7 @@ - + @@ -369,7 +369,7 @@ - + @@ -494,7 +494,7 @@ - + @@ -687,7 +687,7 @@ - + @@ -887,7 +887,7 @@ - + @@ -1023,7 +1023,7 @@ - + @@ -1147,7 +1147,7 @@ - + @@ -1251,7 +1251,7 @@ - + @@ -1285,7 +1285,7 @@ - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json index 4065f9235..a0a14a0b8 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Delete"], "operationId": "PolicyDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The parameter definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicyDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Delete"], "operationId": "PolicyDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"type": "string"}}]}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}, "default": {"value": "Indexed"}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policydefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5RGVmaW5pdGlvbnMve3BvbGljeURlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy definition version.", "lines": ["The policy definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy definition."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings", "options": ["external-settings", "external-evaluation-enforcement-settings"], "group": "Properties", "help": {"short": "The details of the source of external evaluation results required by the policy during enforcement evaluation."}, "args": [{"nullable": true, "type": "object", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "options": ["endpoint-settings"], "help": {"short": "The settings of an external endpoint providing evaluation results."}, "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details", "options": ["details"], "help": {"short": "The details of the endpoint."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind", "options": ["kind"], "help": {"short": "The kind of the endpoint."}}]}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction", "options": ["missing-token-action"], "help": {"short": "What to do when evaluating an enforcement policy that requires an external evaluation and the token is missing. Possible values are Audit and Deny and language expressions are supported."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan", "options": ["result-lifespan"], "help": {"short": "The lifespan of the endpoint invocation result after which it's no longer valid. Value is expected to follow the ISO 8601 duration format and language expressions are supported."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "options": ["role-definition-ids"], "help": {"short": "An array of the role definition Ids the assignment's MSI will need in order to invoke the endpoint."}, "item": {"nullable": true, "type": "string"}}]}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy definition metadata.", "lines": ["The policy definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.mode", "options": ["m", "mode"], "group": "Properties", "help": {"short": "The policy definition mode.", "lines": ["The policy definition mode. Valid values for control plane policy definitions: All, Indexed. The mode 'Indexed' indicates the policy should be evaluated only for resource types that support tags and location. Some examples for data plane policy definitions: Microsoft.KeyVault.Data, Microsoft.Network.Data."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy rule parameter definitions.", "lines": ["The parameter definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.policyRule", "options": ["rule", "rules"], "group": "Properties", "help": {"short": "The policy rule."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicyDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}]}}, {"var": "$Condition_PolicyDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicyDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicyDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "props": [{"type": "any", "name": "details"}, {"type": "string", "name": "kind"}]}, {"type": "string", "name": "missingTokenAction"}, {"type": "string", "name": "resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule"}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_Get"], "operationId": "PolicyDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "object", "name": "externalEvaluationEnforcementSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings", "props": [{"type": "object", "name": "endpointSettings", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings", "props": [{"type": "any", "name": "details", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.details"}, {"type": "string", "name": "kind", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.endpointSettings.kind"}]}, {"type": "string", "name": "missingTokenAction", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.missingTokenAction"}, {"type": "string", "name": "resultLifespan", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.resultLifespan"}, {"type": "array", "name": "roleDefinitionIds", "arg": "$parameters.properties.externalEvaluationEnforcementSettings.roleDefinitionIds", "item": {"type": "string"}}]}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"default": {"value": "Indexed"}, "type": "string", "name": "mode", "arg": "$parameters.properties.mode"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "any", "name": "policyRule", "arg": "$parameters.properties.policyRule"}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicyDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicyDefinitionVersions_CreateOrUpdate"], "operationId": "PolicyDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionName", "arg": "$Path.policyDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml index cb5c35899..28eab0f31 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -13,7 +13,7 @@ - + @@ -43,7 +43,7 @@ - + @@ -167,7 +167,7 @@ - + @@ -299,7 +299,7 @@ - + @@ -329,7 +329,7 @@ - + @@ -358,7 +358,7 @@ - + @@ -394,7 +394,7 @@ - + @@ -523,7 +523,7 @@ - + @@ -713,7 +713,7 @@ - + @@ -911,7 +911,7 @@ - + @@ -1053,7 +1053,7 @@ - + @@ -1177,7 +1177,7 @@ - + @@ -1283,7 +1283,7 @@ - + @@ -1320,7 +1320,7 @@ - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json index f20b9e6f3..de36995b3 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Delete"], "operationId": "PolicySetDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Delete"], "operationId": "PolicySetDefinitions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name is where the policy definition will reside. It can be assigned only at scopes at or below this management group."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBJZH0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeVNldERlZmluaXRpb25zL3twb2xpY3lTZXREZWZpbml0aW9uTmFtZX0=/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfQ==/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupId", "options": ["management-group"], "group": "", "help": {"short": "The management group.", "lines": ["The management group with the given name where the policy set definition resides."]}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy set definition description.", "lines": ["Full description of the policy set definition."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition.", "lines": ["The display name of the policy set definition is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["version"], "group": "Properties", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.versions", "options": ["versions"], "hide": true, "group": "Properties", "help": {"short": "A list of available versions for this policy definition."}, "item": {"nullable": true, "type": "string"}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupId"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitions_GetAtManagementGroup"], "operationId": "PolicySetDefinitions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}, {"type": "array", "name": "versions", "item": {"type": "string"}}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_Get"], "operationId": "PolicySetDefinitions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}, {"type": "array", "name": "versions", "arg": "$parameters.properties.versions", "item": {"type": "string"}}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupId", "arg": "$Path.managementGroupId", "required": true}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitions_CreateOrUpdate"], "operationId": "PolicySetDefinitions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinition_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml index 2494d1aed..0f4c99a4d 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fQ==/2025-11-01.xml @@ -12,7 +12,7 @@ - + @@ -37,7 +37,7 @@ - + @@ -175,7 +175,7 @@ - + @@ -320,7 +320,7 @@ - + @@ -342,7 +342,7 @@ - + @@ -368,7 +368,7 @@ - + @@ -400,7 +400,7 @@ - + @@ -544,7 +544,7 @@ - + @@ -761,7 +761,7 @@ - + @@ -985,7 +985,7 @@ - + @@ -1141,7 +1141,7 @@ - + @@ -1278,7 +1278,7 @@ - + @@ -1393,7 +1393,7 @@ - + @@ -1427,7 +1427,7 @@ - + diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json index 18cd59f04..1e7d75710 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Delete"], "operationId": "PolicySetDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>*%&:\\?.+/]*[^<>*%&:\\?.+/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy set-definition version", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "help": {"short": "Comma-separated list of additional properties to be included in the response. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Delete", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_DeleteAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_DeleteAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Delete"], "operationId": "PolicySetDefinitionVersions_Delete", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200]}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": "Are you sure you want to perform this operation?"}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"type": "any"}}, {"type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "required": true, "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "required": true, "help": {"short": "The ID of the policy definition or policy set definition."}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/providers/microsoft.management/managementgroups/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3Byb3ZpZGVycy9NaWNyb3NvZnQuTWFuYWdlbWVudC9tYW5hZ2VtZW50R3JvdXBzL3ttYW5hZ2VtZW50R3JvdXBOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}, {"id": "/subscriptions/{}/providers/microsoft.authorization/policysetdefinitions/{}/versions/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9wcm92aWRlcnMvTWljcm9zb2Z0LkF1dGhvcml6YXRpb24vcG9saWN5U2V0RGVmaW5pdGlvbnMve3BvbGljeVNldERlZmluaXRpb25OYW1lfS92ZXJzaW9ucy97cG9saWN5RGVmaW5pdGlvblZlcnNpb259/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.managementGroupName", "options": ["management-group"], "group": "", "help": {"short": "The management group."}, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "var": "$Path.policyDefinitionVersion", "options": ["version"], "required": true, "group": "", "help": {"short": "The policy set definition version.", "lines": ["The policy set definition version in #.#.# format."]}, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "var": "$Path.policySetDefinitionName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy set definition."}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "SubscriptionId", "var": "$Path.subscriptionId", "options": ["subscription"], "idPart": "subscription"}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "The policy set definition description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy set definition."}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy set definition metadata.", "lines": ["The policy set definition metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The policy set definition parameter definitions.", "lines": ["The definitions for parameters used in the policy rule. The keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.parameters{}.allowedValues", "options": ["allowed-values"], "help": {"short": "The allowed values for the parameter."}, "item": {"nullable": true, "type": "any"}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.defaultValue", "options": ["default-value"], "help": {"short": "The default value for the parameter if no value is provided."}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters{}.metadata", "options": ["metadata"], "help": {"short": "General metadata for the parameter."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.parameters{}.metadata.assignPermissions", "options": ["assign-permissions"], "help": {"short": "Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.description", "options": ["description"], "help": {"short": "The description of the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.displayName", "options": ["display-name"], "help": {"short": "The display name for the parameter."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.metadata.strongType", "options": ["strong-type"], "help": {"short": "Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from."}}], "additionalProps": {"item": {"nullable": true, "type": "any"}}}, {"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.schema", "options": ["schema"], "help": {"short": "Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.parameters{}.type", "options": ["type"], "help": {"short": "The data type of the parameter."}, "enum": {"items": [{"name": "Array", "value": "Array"}, {"name": "Boolean", "value": "Boolean"}, {"name": "DateTime", "value": "DateTime"}, {"name": "Float", "value": "Float"}, {"name": "Integer", "value": "Integer"}, {"name": "Object", "value": "Object"}, {"name": "String", "value": "String"}]}}]}}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitionGroups", "options": ["definition-groups"], "group": "Properties", "help": {"short": "The metadata describing groups of policy definition references within the policy set definition."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId", "options": ["additional-metadata-id"], "help": {"short": "A resource ID of a resource that contains additional metadata about the group."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].category", "options": ["category"], "help": {"short": "The group's category."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].description", "options": ["description"], "help": {"short": "The group's description."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionGroups[].displayName", "options": ["display-name"], "help": {"short": "The group's display name."}}, {"type": "string", "var": "$parameters.properties.policyDefinitionGroups[].name", "options": ["name"], "help": {"short": "The name of the group."}}]}}, {"type": "array", "var": "$parameters.properties.policyDefinitions", "options": ["definitions"], "group": "Properties", "help": {"short": "An array of policy definition references."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].definitionVersion", "options": ["definition-version"], "help": {"short": "The version of the policy definition to use."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.policyDefinitions[].groupNames", "options": ["group-names"], "help": {"short": "The name of the groups that this policy definition reference belongs to."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "object", "var": "$parameters.properties.policyDefinitions[].parameters", "options": ["parameters"], "help": {"short": "The parameter values for the referenced policy rule. The keys are the parameter names."}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.policyDefinitions[].parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionId", "options": ["policy-definition-id"], "help": {"short": "The ID of the policy definition or policy set definition."}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId", "options": ["policy-definition-reference-id"], "help": {"short": "A unique id (within the policy set definition) for this policy definition reference."}}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyType", "options": ["policy-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static."}, "enum": {"items": [{"name": "BuiltIn", "value": "BuiltIn"}, {"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "Static", "value": "Static"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.version", "options": ["policy-definition-version"], "hide": true, "group": "Properties", "help": {"short": "The policy set definition version in #.#.# format."}}]}], "conditions": [{"var": "$Condition_PolicySetDefinitionVersions_GetAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_Get", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.managementGroupName"}, {"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}]}}, {"var": "$Condition_PolicySetDefinitionVersions_CreateOrUpdate", "operator": {"type": "and", "operators": [{"type": "hasValue", "arg": "$Path.policyDefinitionVersion"}, {"type": "hasValue", "arg": "$Path.policySetDefinitionName"}, {"type": "hasValue", "arg": "$Path.subscriptionId"}]}}], "operations": [{"when": ["$Condition_PolicySetDefinitionVersions_GetAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_GetAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "any", "name": "metadata"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue"}, {"type": "object", "name": "metadata", "props": [{"type": "boolean", "name": "assignPermissions"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId"}, {"type": "string", "name": "category"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"type": "string", "name": "name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"type": "array", "name": "groupNames", "item": {"type": "string"}}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version"}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_Get"], "operationId": "PolicySetDefinitionVersions_Get", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "object", "name": "properties", "props": [{"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "array", "name": "allowedValues", "arg": "$parameters.properties.parameters{}.allowedValues", "item": {"type": "any"}}, {"type": "any", "name": "defaultValue", "arg": "$parameters.properties.parameters{}.defaultValue"}, {"type": "object", "name": "metadata", "arg": "$parameters.properties.parameters{}.metadata", "props": [{"type": "boolean", "name": "assignPermissions", "arg": "$parameters.properties.parameters{}.metadata.assignPermissions"}, {"type": "string", "name": "description", "arg": "$parameters.properties.parameters{}.metadata.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.parameters{}.metadata.displayName"}, {"type": "string", "name": "strongType", "arg": "$parameters.properties.parameters{}.metadata.strongType"}], "additionalProps": {"item": {"type": "any"}}}, {"type": "any", "name": "schema", "arg": "$parameters.properties.parameters{}.schema"}, {"type": "string", "name": "type", "arg": "$parameters.properties.parameters{}.type", "enum": {"items": [{"value": "Array"}, {"value": "Boolean"}, {"value": "DateTime"}, {"value": "Float"}, {"value": "Integer"}, {"value": "Object"}, {"value": "String"}]}}]}}}, {"type": "array", "name": "policyDefinitionGroups", "arg": "$parameters.properties.policyDefinitionGroups", "item": {"type": "object", "props": [{"type": "string", "name": "additionalMetadataId", "arg": "$parameters.properties.policyDefinitionGroups[].additionalMetadataId"}, {"type": "string", "name": "category", "arg": "$parameters.properties.policyDefinitionGroups[].category"}, {"type": "string", "name": "description", "arg": "$parameters.properties.policyDefinitionGroups[].description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.policyDefinitionGroups[].displayName"}, {"type": "string", "name": "name", "arg": "$parameters.properties.policyDefinitionGroups[].name", "required": true}]}, "identifiers": ["name"]}, {"type": "array", "name": "policyDefinitions", "arg": "$parameters.properties.policyDefinitions", "required": true, "item": {"type": "object", "props": [{"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.policyDefinitions[].definitionVersion"}, {"type": "array", "name": "groupNames", "arg": "$parameters.properties.policyDefinitions[].groupNames", "item": {"type": "string"}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.policyDefinitions[].parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.policyDefinitions[].parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionId", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.policyDefinitions[].policyDefinitionReferenceId"}]}, "identifiers": ["policyDefinitionReferenceId"]}, {"type": "string", "name": "policyType", "arg": "$parameters.properties.policyType", "enum": {"items": [{"value": "BuiltIn"}, {"value": "Custom"}, {"value": "NotSpecified"}, {"value": "Static"}]}}, {"type": "string", "name": "version", "arg": "$parameters.properties.version"}], "clientFlatten": true}], "clientFlatten": true}}}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdateAtManagementGroup", "http": {"path": "/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "managementGroupName", "arg": "$Path.managementGroupName", "required": true, "format": {"maxLength": 90, "minLength": 1}}, {"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"when": ["$Condition_PolicySetDefinitionVersions_CreateOrUpdate"], "operationId": "PolicySetDefinitionVersions_CreateOrUpdate", "http": {"path": "/subscriptions/{subscriptionId}/providers/Microsoft.Authorization/policySetDefinitions/{policySetDefinitionName}/versions/{policyDefinitionVersion}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyDefinitionVersion", "arg": "$Path.policyDefinitionVersion", "required": true, "format": {"pattern": "^\\d+\\.\\d+\\.\\d+$"}}, {"type": "string", "name": "policySetDefinitionName", "arg": "$Path.policySetDefinitionName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "uuid", "name": "subscriptionId", "arg": "$Path.subscriptionId", "required": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [200, 201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicySetDefinitionVersion_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml index fe173d124..2b823f58c 100644 --- a/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml +++ b/Resources/mgmt-plane/L3Byb3ZpZGVycy9taWNyb3NvZnQubWFuYWdlbWVudC9tYW5hZ2VtZW50Z3JvdXBzL3t9L3Byb3ZpZGVycy9taWNyb3NvZnQuYXV0aG9yaXphdGlvbi9wb2xpY3lzZXRkZWZpbml0aW9ucy97fS92ZXJzaW9ucy97fQ==/2025-11-01.xml @@ -17,7 +17,7 @@ - + @@ -49,7 +49,7 @@ - + @@ -187,7 +187,7 @@ - + @@ -334,7 +334,7 @@ - + @@ -363,7 +363,7 @@ - + @@ -392,7 +392,7 @@ - + @@ -429,7 +429,7 @@ - + @@ -576,7 +576,7 @@ - + @@ -790,7 +790,7 @@ - + @@ -1013,7 +1013,7 @@ - + @@ -1174,7 +1174,7 @@ - + @@ -1311,7 +1311,7 @@ - + @@ -1428,7 +1428,7 @@ - + @@ -1465,7 +1465,7 @@ - + From 0e0715e00e4ed493fb9a18d08636c1dc686e55a6 Mon Sep 17 00:00:00 2001 From: Celina Zhao Date: Fri, 22 May 2026 15:54:42 -0700 Subject: [PATCH 8/8] Fix message --- .../2025-11-01.json | 2 +- .../2025-11-01.xml | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json index 8a3fca9bc..56d29186c 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.json @@ -1 +1 @@ -{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyAssignments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["assign-identity", "system-assigned", "mi-system-assigned"], "group": "Identity", "help": {"short": "Sets the system assigned managed identity.", "lines": ["Sets the system assigned managed identity of the policy assignment."]}}, {"type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Identity", "help": {"short": "Sets the user assigned managed identity.", "lines": ["Sets the user assigned managed identity of the policy assignment."]}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy override.", "lines": ["Array of objects that specify resource selector values to use for this assignment."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "@Selector_create"}}, {"type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "@Selector_create.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "@Selector_create.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"type": "array", "var": "@Selector_create.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve", "self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}], "userAssigned": {"action": "create", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "create", "type": "string"}}, "systemAssigned": {"action": "create", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_create"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_create.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_create.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_create.notIn", "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"nullable": true, "type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"nullable": true, "type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"nullable": true, "blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy property value override."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"nullable": true, "type": "array<@Selector_update>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "@Selector_update"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "@Selector_update.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "@Selector_update.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"nullable": true, "type": "array", "var": "@Selector_update.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}], "cls": "Selector_update"}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve", "self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"nullable": true, "type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"nullable": true, "type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}]}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_update>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_update"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_update.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_update.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_update.notIn", "item": {"type": "string"}}], "cls": "Selector_update"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}], "commandGroups": [{"name": "identity", "commands": [{"name": "assign", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "assign", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "assign", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "assign", "type": "string"}}, "systemAssigned": {"action": "assign", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}, {"name": "remove", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identities."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "remove", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "remove", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "remove", "type": "string"}}, "systemAssigned": {"action": "remove", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}]}, {"name": "non-compliance-message", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceCreate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceDelete": {"ref": "$Subresource", "json": {}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}]}]} \ No newline at end of file +{"plane": "mgmt-plane", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "commandGroups": [{"name": "policy assignment", "commands": [{"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$Query.expand", "options": ["expand"], "group": "", "help": {"short": "Additional properties to include in output", "lines": ["Comma-separated list of additional properties to include in the command output. Supported values are 'LatestDefinitionVersion, EffectiveDefinitionVersion'."]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"params": [{"type": "string", "name": "$expand", "arg": "$Query.expand"}], "consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "operations": [{"operationId": "PolicyAssignments_Delete", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "delete", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"statusCode": [204]}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["assign-identity", "system-assigned", "mi-system-assigned"], "group": "Identity", "help": {"short": "Sets the system assigned managed identity.", "lines": ["Sets the system assigned managed identity of the policy assignment."]}}, {"type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Identity", "help": {"short": "Sets the user assigned managed identity.", "lines": ["Sets the user assigned managed identity of the policy assignment."]}, "item": {"type": "string"}}, {"type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "default": {"value": "Default"}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"type": "string"}}, {"type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy override.", "lines": ["Array of objects that specify resource selector values to use for this assignment."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "@Selector_create"}}, {"type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"type": "object", "args": [{"type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"type": "object", "args": [{"type": "array", "var": "@Selector_create.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"type": "string"}}, {"type": "string", "var": "@Selector_create.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"type": "array", "var": "@Selector_create.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption", "self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}], "userAssigned": {"action": "create", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "create", "type": "string"}}, "systemAssigned": {"action": "create", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_create>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_create"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_create.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_create.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_create.notIn", "item": {"type": "string"}}], "cls": "Selector_create"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}]}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Identity", "args": [{"nullable": true, "type": "string", "var": "$parameters.identity.type", "options": ["type"], "hide": true, "group": "Identity", "help": {"short": "The managed identity type.", "lines": ["The managed identity type is the only required field when adding a system or user assigned identity to a resource."]}, "enum": {"items": [{"name": "None", "value": "None"}, {"name": "SystemAssigned", "value": "SystemAssigned"}, {"name": "UserAssigned", "value": "UserAssigned"}]}}, {"nullable": true, "type": "object", "var": "$parameters.identity.userAssignedIdentities", "options": ["user-assigned-identities"], "hide": true, "group": "Identity", "help": {"short": "The user assigned managed identity.", "lines": ["The user assigned managed identity used by the policy assignment. The user assigned managed identity dictionary keys will be ARM resource ids (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}')."]}, "additionalProps": {"item": {"nullable": true, "blank": {"value": {}}, "type": "object"}}}]}, {"name": "Parameters", "args": [{"nullable": true, "type": "ResourceLocation", "var": "$parameters.location", "options": ["l", "location"], "group": "Parameters", "help": {"short": "The location of the policy assignment.", "lines": ["The location of the policy assignment is only required when utilizing managed identity."]}}]}, {"name": "Properties", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.assignmentType", "options": ["assignment-type"], "hide": true, "group": "Properties", "help": {"short": "The type of policy assignment. Possible values are NotSpecified, System, SystemHidden, and Custom. Immutable."}, "enum": {"items": [{"name": "Custom", "value": "Custom"}, {"name": "NotSpecified", "value": "NotSpecified"}, {"name": "System", "value": "System"}, {"name": "SystemHidden", "value": "SystemHidden"}]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.definitionVersion", "options": ["definition-version"], "group": "Properties", "help": {"short": "The policy version to assign.", "lines": ["The version of the policy definition or policy set definition to assign."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.description", "options": ["description"], "group": "Properties", "help": {"short": "Policy assignment description.", "lines": ["Full description of the policy assignment."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.displayName", "options": ["display-name"], "group": "Properties", "help": {"short": "The display name of the policy assignment.", "lines": ["The display name of the policy assignment is not part of its ID, allowing for longer and more flexible naming."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.enforcementMode", "options": ["e", "enforcement-mode"], "group": "Properties", "help": {"short": "The policy assignment enforcement mode.", "lines": ["The policy assignment enforcement mode. Possible values are Default and DoNotEnforce."]}, "enum": {"items": [{"name": "Default", "value": "Default"}, {"name": "DoNotEnforce", "value": "DoNotEnforce"}, {"name": "Enroll", "value": "Enroll"}]}}, {"nullable": true, "type": "any", "var": "$parameters.properties.metadata", "options": ["metadata"], "group": "Properties", "help": {"short": "The policy assignment metadata.", "lines": ["The policy assignment metadata. Metadata is an open-ended object and is typically a collection of key value pairs."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.notScopes", "options": ["not-scopes"], "group": "Properties", "help": {"short": "The policy assignment excluded scopes.", "lines": ["The collection of scopes within the policy assignment scope that it does not apply to."]}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "array", "var": "$parameters.properties.overrides", "options": ["overrides"], "group": "Properties", "help": {"short": "The policy property value override."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].kind", "options": ["kind"], "help": {"short": "The override kind."}, "enum": {"items": [{"name": "definitionVersion", "value": "definitionVersion"}, {"name": "policyEffect", "value": "policyEffect"}]}}, {"nullable": true, "type": "array<@Selector_update>", "var": "$parameters.properties.overrides[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "@Selector_update"}}, {"nullable": true, "type": "string", "var": "$parameters.properties.overrides[].value", "options": ["value"], "help": {"short": "The value to override the policy property."}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.parameters", "options": ["p", "params"], "group": "Properties", "help": {"short": "The parameter values for the assigned policy rule.", "lines": ["Object or file path containing the policy rule parameter values to be used when assigning the policy definition. The object keys are the parameter names."]}, "additionalProps": {"item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "any", "var": "$parameters.properties.parameters{}.value", "options": ["value"], "help": {"short": "The value of the parameter."}}]}}}, {"nullable": true, "type": "string", "var": "$parameters.properties.policyDefinitionId", "options": ["d", "policy-set-definition"], "group": "Properties", "help": {"short": "The policy definition or policy set definition to assign.", "lines": ["The resource ID of the policy definition (format: /{scope}/providers/Microsoft.Authorization/policyDefinitions/{name}) or policy set definition (format: /{scope}/providers/Microsoft.Authorization/policySetDefinitions/{name}) to be assigned."]}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors", "options": ["resource-selectors"], "group": "Properties", "help": {"short": "The resource selectors list to filter policies by resource properties.", "lines": ["The collection of resource selector expressions used to filter policy assignment applicability by certain resource property values."]}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "string", "var": "$parameters.properties.resourceSelectors[].name", "options": ["name"], "help": {"short": "The name of the resource selector."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.resourceSelectors[].selectors", "options": ["selectors"], "help": {"short": "The list of the selector expressions."}, "item": {"nullable": true, "type": "object", "args": [{"nullable": true, "type": "array", "var": "@Selector_update.in", "options": ["in"], "help": {"short": "The list of values to filter in."}, "item": {"nullable": true, "type": "string"}}, {"nullable": true, "type": "string", "var": "@Selector_update.kind", "options": ["kind"], "help": {"short": "The selector kind."}, "enum": {"items": [{"name": "policyDefinitionReferenceId", "value": "policyDefinitionReferenceId"}, {"name": "resourceLocation", "value": "resourceLocation"}, {"name": "resourceType", "value": "resourceType"}, {"name": "resourceWithoutLocation", "value": "resourceWithoutLocation"}]}}, {"nullable": true, "type": "array", "var": "@Selector_update.notIn", "options": ["not-in"], "help": {"short": "The list of values to filter out."}, "item": {"nullable": true, "type": "string"}}], "cls": "Selector_update"}}]}}, {"nullable": true, "type": "object", "var": "$parameters.properties.selfServeExemptionSettings", "options": ["self-serve-exemption", "self-serve-exemption-settings"], "group": "Properties", "help": {"short": "The self-serve exemption settings for the policy assignment."}, "args": [{"nullable": true, "type": "boolean", "var": "$parameters.properties.selfServeExemptionSettings.enabled", "options": ["enabled"], "help": {"short": "Indicates whether self-serve exemption is enabled."}}, {"nullable": true, "type": "array", "var": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "options": ["policy-definition-reference-ids"], "help": {"short": "The policy definition reference IDs for self-serve exemption."}, "item": {"nullable": true, "type": "string"}}]}]}, {"name": "non-compliance-message", "args": [{"nullable": true, "type": "array", "var": "$parameters.properties.nonComplianceMessages", "options": ["m", "non-compliance-messages"], "group": "non-compliance-message", "help": {"short": "The messages that describe why a resource is non-compliant with the policy."}, "item": {"nullable": true, "type": "object", "args": [{"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"nullable": true, "type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}}]}], "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Instance", "json": {"schema": {"type": "object", "name": "parameters", "required": true, "props": [{"type": "IdentityObject", "name": "identity", "props": [{"type": "string", "name": "type", "arg": "$parameters.identity.type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "arg": "$parameters.identity.userAssignedIdentities", "additionalProps": {"item": {"type": "object"}}}]}, {"type": "ResourceLocation", "name": "location", "arg": "$parameters.location"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "arg": "$parameters.properties.assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion", "arg": "$parameters.properties.definitionVersion"}, {"type": "string", "name": "description", "arg": "$parameters.properties.description"}, {"type": "string", "name": "displayName", "arg": "$parameters.properties.displayName"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "arg": "$parameters.properties.enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"type": "any", "name": "metadata", "arg": "$parameters.properties.metadata"}, {"type": "array", "name": "nonComplianceMessages", "arg": "$parameters.properties.nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "arg": "$parameters.properties.notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "arg": "$parameters.properties.overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "arg": "$parameters.properties.overrides[].kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_update>", "name": "selectors", "arg": "$parameters.properties.overrides[].selectors", "item": {"type": "@Selector_update"}}, {"type": "string", "name": "value", "arg": "$parameters.properties.overrides[].value"}]}}, {"type": "object", "name": "parameters", "arg": "$parameters.properties.parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value", "arg": "$parameters.properties.parameters{}.value"}]}}}, {"type": "string", "name": "policyDefinitionId", "arg": "$parameters.properties.policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "arg": "$parameters.properties.resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name", "arg": "$parameters.properties.resourceSelectors[].name"}, {"type": "array", "name": "selectors", "arg": "$parameters.properties.resourceSelectors[].selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "arg": "@Selector_update.in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "arg": "@Selector_update.kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "arg": "@Selector_update.notIn", "item": {"type": "string"}}], "cls": "Selector_update"}}]}}, {"type": "object", "name": "selfServeExemptionSettings", "arg": "$parameters.properties.selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled", "arg": "$parameters.properties.selfServeExemptionSettings.enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "arg": "$parameters.properties.selfServeExemptionSettings.policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}], "clientFlatten": true}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Instance", "clientFlatten": true}], "confirmation": ""}], "commandGroups": [{"name": "identity", "commands": [{"name": "assign", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Set the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Set the user managed identity."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "assign", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "assign", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "assign", "type": "string"}}, "systemAssigned": {"action": "assign", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}, {"name": "remove", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}, {"name": "Parameters.identity", "args": [{"blank": {"value": "True"}, "type": "string", "var": "$parameters.identity.systemAssigned", "options": ["system-assigned", "mi-system-assigned"], "group": "Parameters.identity", "help": {"short": "Remove the system managed identity."}}, {"blank": {"value": []}, "type": "array", "var": "$parameters.identity.userAssigned", "options": ["user-assigned", "mi-user-assigned"], "group": "Parameters.identity", "help": {"short": "Remove the user managed identity."}, "item": {"type": "string"}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"action": "remove", "type": "IdentityObject", "name": "parameters.identity", "required": true, "userAssigned": {"action": "remove", "type": "array", "name": "userAssigned", "arg": "$parameters.identity.userAssigned", "item": {"action": "remove", "type": "string"}}, "systemAssigned": {"action": "remove", "type": "string", "name": "systemAssigned", "arg": "$parameters.identity.systemAssigned"}}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "identity", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "object", "name": "identity"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}]}]}, {"name": "non-compliance-message", "commands": [{"name": "list", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages"}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "array", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "create", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceCreate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "update", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceUpdate": {"ref": "$Subresource", "json": {"schema": {"type": "object", "name": "parameters.properties.nonComplianceMessages[]", "required": true, "props": [{"type": "string", "name": "message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId"}]}}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}, {"name": "delete", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}, {"instanceDelete": {"ref": "$Subresource", "json": {}}}, {"operationId": "PolicyAssignments_Create", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "put", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}, "body": {"json": {"ref": "$Instance"}}}, "responses": [{"statusCode": [201], "body": {"json": {"var": "$Instance", "schema": {"type": "@PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "confirmation": ""}, {"name": "show", "version": "2025-11-01", "resources": [{"id": "/{scope}/providers/microsoft.authorization/policyassignments/{}", "version": "2025-11-01", "subresource": "properties.nonComplianceMessages[]", "swagger": "mgmt-plane/resources/ResourceProviders/Microsoft.Authorization/Paths/L3tzY29wZX0vcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL3BvbGljeUFzc2lnbm1lbnRzL3twb2xpY3lBc3NpZ25tZW50TmFtZX0=/V/MjAyNS0xMS0wMQ=="}], "argGroups": [{"name": "", "args": [{"type": "string", "var": "$Path.policyAssignmentName", "options": ["n", "name"], "required": true, "group": "", "help": {"short": "The name of the policy assignment.", "lines": ["The name of the policy assignment is the name segment of its resource ID."]}, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "var": "$Path.scope", "options": ["scope"], "required": true, "group": "", "help": {"short": "The scope of the policy assignment.", "lines": ["Valid scopes are: management group (format: '/providers/Microsoft.Management/managementGroups/{managementGroup}'), subscription (format: '/subscriptions/{subscriptionId}'), resource group (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}', or resource (format: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/[{parentResourcePath}/]{resourceType}/{resourceName}'. The scope of an assignment is always the part of its ID preceding '/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}'. If scope is not provided, the scope will be the implied or specified subscription."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].message", "options": ["m", "message"], "required": true, "group": "", "help": {"short": "A custom non-compliance message.", "lines": ["A message that describes the reasons a resource was determined to be non-compliant. This will be shown in 'deny' error messages and resource non-compliance results."]}}, {"type": "string", "var": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "options": ["r", "policy-definition-reference-id"], "required": true, "group": "", "help": {"short": "The policy definition reference ID.", "lines": ["The policy definition reference ID within a policy set definition the message is intended for. This is only applicable if the policy assignment assigns a policy set definition. If not provided, the message applies to all policy definitions assigned by this policy assignment."]}}]}], "subresourceSelector": {"var": "$Subresource", "ref": "$Instance", "json": {"type": "object", "name": "parameters", "prop": {"type": "array", "name": "properties.nonComplianceMessages", "item": {"type": "object"}, "identifiers": [{"type": "string", "name": "[].message", "arg": "$parameters.properties.nonComplianceMessages[].message", "required": true}, {"type": "string", "name": "[].policyDefinitionReferenceId", "arg": "$parameters.properties.nonComplianceMessages[].policyDefinitionReferenceId", "required": true}]}}}, "operations": [{"operationId": "PolicyAssignments_Get", "http": {"path": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{policyAssignmentName}", "request": {"method": "get", "path": {"params": [{"type": "string", "name": "policyAssignmentName", "arg": "$Path.policyAssignmentName", "required": true, "format": {"pattern": "^[^<>%&:\\?/]*[^<>%&:\\?/ ]+$"}}, {"type": "string", "name": "scope", "arg": "$Path.scope", "required": true, "skipUrlEncoding": true}]}, "query": {"consts": [{"readOnly": true, "const": true, "default": {"value": "2025-11-01"}, "type": "string", "name": "api-version", "required": true, "format": {"minLength": 1}}]}}, "responses": [{"statusCode": [200], "body": {"json": {"var": "$Instance", "schema": {"type": "object", "props": [{"readOnly": true, "type": "ResourceId", "name": "id", "format": {"template": "/{scope}/providers/Microsoft.Authorization/policyAssignments/{}"}}, {"type": "IdentityObject", "name": "identity", "props": [{"readOnly": true, "type": "string", "name": "principalId"}, {"readOnly": true, "type": "string", "name": "tenantId"}, {"type": "string", "name": "type", "enum": {"items": [{"value": "None"}, {"value": "SystemAssigned"}, {"value": "UserAssigned"}]}}, {"type": "object", "name": "userAssignedIdentities", "additionalProps": {"item": {"type": "object", "props": [{"readOnly": true, "type": "string", "name": "clientId"}, {"readOnly": true, "type": "string", "name": "principalId"}]}}}]}, {"type": "ResourceLocation", "name": "location"}, {"readOnly": true, "type": "string", "name": "name"}, {"type": "object", "name": "properties", "props": [{"type": "string", "name": "assignmentType", "enum": {"items": [{"value": "Custom"}, {"value": "NotSpecified"}, {"value": "System"}, {"value": "SystemHidden"}]}}, {"type": "string", "name": "definitionVersion"}, {"type": "string", "name": "description"}, {"type": "string", "name": "displayName"}, {"readOnly": true, "type": "string", "name": "effectiveDefinitionVersion"}, {"default": {"value": "Default"}, "type": "string", "name": "enforcementMode", "enum": {"items": [{"value": "Default"}, {"value": "DoNotEnforce"}, {"value": "Enroll"}]}}, {"readOnly": true, "type": "string", "name": "instanceId"}, {"readOnly": true, "type": "string", "name": "latestDefinitionVersion"}, {"type": "any", "name": "metadata"}, {"type": "array", "name": "nonComplianceMessages", "item": {"type": "object", "props": [{"type": "string", "name": "message", "required": true}, {"type": "string", "name": "policyDefinitionReferenceId"}]}, "identifiers": ["message", "policyDefinitionReferenceId"]}, {"type": "array", "name": "notScopes", "item": {"type": "string"}}, {"type": "array", "name": "overrides", "item": {"type": "object", "props": [{"type": "string", "name": "kind", "enum": {"items": [{"value": "definitionVersion"}, {"value": "policyEffect"}]}}, {"type": "array<@Selector_read>", "name": "selectors", "item": {"type": "@Selector_read"}}, {"type": "string", "name": "value"}]}}, {"type": "object", "name": "parameters", "additionalProps": {"item": {"type": "object", "props": [{"type": "any", "name": "value"}]}}}, {"type": "string", "name": "policyDefinitionId"}, {"type": "array", "name": "resourceSelectors", "item": {"type": "object", "props": [{"type": "string", "name": "name"}, {"type": "array", "name": "selectors", "item": {"type": "object", "props": [{"type": "array", "name": "in", "item": {"type": "string"}}, {"type": "string", "name": "kind", "enum": {"items": [{"value": "policyDefinitionReferenceId"}, {"value": "resourceLocation"}, {"value": "resourceType"}, {"value": "resourceWithoutLocation"}]}}, {"type": "array", "name": "notIn", "item": {"type": "string"}}], "cls": "Selector_read"}}]}}, {"readOnly": true, "type": "string", "name": "scope"}, {"type": "object", "name": "selfServeExemptionSettings", "props": [{"type": "boolean", "name": "enabled"}, {"type": "array", "name": "policyDefinitionReferenceIds", "item": {"type": "string"}}]}], "clientFlatten": true}, {"readOnly": true, "type": "object", "name": "systemData", "props": [{"type": "dateTime", "name": "createdAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "createdBy"}, {"type": "string", "name": "createdByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}, {"type": "dateTime", "name": "lastModifiedAt", "format": {"protocol": "iso"}}, {"type": "string", "name": "lastModifiedBy"}, {"type": "string", "name": "lastModifiedByType", "enum": {"items": [{"value": "Application"}, {"value": "Key"}, {"value": "ManagedIdentity"}, {"value": "User"}]}}]}, {"readOnly": true, "type": "string", "name": "type"}], "cls": "PolicyAssignment_read"}}}}, {"isError": true, "body": {"json": {"schema": {"type": "@MgmtErrorFormat"}}}}]}}], "outputs": [{"type": "object", "ref": "$Subresource", "clientFlatten": true}], "confirmation": ""}]}]}]} \ No newline at end of file diff --git a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml index 28af93ddc..4c5344840 100644 --- a/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml +++ b/Resources/mgmt-plane/L3tzY29wZX0vcHJvdmlkZXJzL21pY3Jvc29mdC5hdXRob3JpemF0aW9uL3BvbGljeWFzc2lnbm1lbnRzL3t9/2025-11-01.xml @@ -512,7 +512,7 @@ - + @@ -945,7 +945,7 @@ - + @@ -1300,7 +1300,7 @@ - + @@ -1542,11 +1542,11 @@ - + - +