Learn Idem

Learn Idem

Powered by Idem Project

azure.authorization.role_definitions

**Autogenerated function**

Delete Role Definitions

Args:
    name(str): The identifier for this state.
    scope(str): The scope of the role definition.
    role_definition_id(str): The ID of the role definition to delete.

Returns:
    dict

Examples:

    .. code-block:: sls

        my-role-definition:
          azure.authorization.role_definitions.absent:
            - name: my-role-definition
            - scope: /subscriptions/subscription-id
            - role_definition_id: aa246b4f-3ba8-4d39-8e43-687eb2e1661c
**Autogenerated function**

Describe the resource in a way that can be recreated/managed with the corresponding "present" function


List all Role Definitions under the same subscription


Returns:
    Dict[str, Any]

Examples:

    .. code-block:: bash

        $ idem describe azure.authorization.role_definitions
**Autogenerated function**

Create or update Role Definitions

Args:
    name(str): The identifier for this state.
    scope(str): The scope of the role definition.
    role_definition_id(str): The ID of the role definition.
    role_definition_name(str): The name of the role definition.
    permissions(List): The permissions of the role definitions.
    description(str): The description of the role definitions.
    assignable_scopes(List,Optional): The assignable scopes of the role definitions. Defaults to scope.
    resource_id(str, optional): Role definition resource id on Azure.

Returns:
    dict

Examples:

    .. code-block:: sls

        my-role-definition:
          azure.authorization.role_definitions.present:
            - name: my-role-definition
            - scope: /subscriptions/subscription-id
            - role_definition_id: aa246b4f-3ba8-4d39-8e43-687eb2e1661c
            - role_definition_name: my-role-name
            - permissions:
              - actions:
                - Microsoft.Resources/subscriptions/resourceGroups/read
              - notActions:
                - Microsoft.Resources/subscriptions/resourceGroups/write
              - dataActions:
                - Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read
              - notDataActions:
                - Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write
            - description: my-role-description
            - assignable_scopes:
              - /subscriptions/subscription-id
Last updated on 20 Sep 2022
 Edit on GitHub