Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

2020-10-01 GA release of PIM specs #18459

Merged
merged 11 commits into from
Apr 1, 2022
Original file line number Diff line number Diff line change
@@ -0,0 +1,154 @@
{
"swagger": "2.0",
"info": {
"title": "AuthorizationManagementClient",
"version": "2020-10-01",
"description": "Role based access control provides you a way to apply granular level policy administration down to individual resources or resource groups. These operations enable you to manage role assignments. A role assignment grants access to Azure Active Directory users."
},
"host": "management.azure.com",
"schemes": [
"https"
],
"consumes": [
"application/json"
],
"produces": [
"application/json"
],
"security": [
{
"azure_auth": [
"user_impersonation"
]
}
],
"securityDefinitions": {
"azure_auth": {
"type": "oauth2",
"authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
"flow": "implicit",
"description": "Azure Active Directory OAuth2 Flow",
"scopes": {
"user_impersonation": "impersonate your user account"
}
}
},
"paths": {
"/{scope}/providers/Microsoft.Authorization/eligibleChildResources": {
"get": {
"tags": [
"eligibleChildResources"
],
"operationId": "EligibleChildResources_Get",
"description": "Get the child resources of a resource on which user has eligible access",
"parameters": [
{
"name": "scope",
"in": "path",
"required": true,
"type": "string",
"description": "The scope of the role management policy.",
"x-ms-skip-url-encoding": true
},
{
"name": "$filter",
"in": "query",
"required": false,
"type": "string",
"description": "The filter to apply on the operation. Use $filter=resourceType+eq+'Subscription' to filter on only resource of type = 'Subscription'. Use $filter=resourceType+eq+'subscription'+or+resourceType+eq+'resourcegroup' to filter on resource of type = 'Subscription' or 'ResourceGroup'"
},
{
"$ref": "../../../../../common-types/resource-management/v2/types.json#/parameters/ApiVersionParameter"
}
],
"responses": {
"200": {
"description": "OK - Returns information about the role management policy.",
"schema": {
"$ref": "#/definitions/EligibleChildResourcesListResult"
}
},
"default": {
"description": "Error response describing why the operation failed.",
"schema": {
"$ref": "#/definitions/CloudError"
}
}
},
"x-ms-pageable": {
"nextLinkName": "nextLink"
},
"x-ms-examples": {
"GetEligibleChildResourcesByScope": {
"$ref": "./examples/GetEligibleChildResourcesByScope.json"
}
}
}
}
},
"definitions": {
"EligibleChildResourcesListResult": {
"properties": {
"value": {
"type": "array",
"items": {
"$ref": "#/definitions/EligibleChildResource"
},
"description": "Eligible child resource list."
},
"nextLink": {
"type": "string",
"description": "The URL to use for getting the next set of results."
}
},
"type": "object",
"description": "Eligible child resources list operation result."
},
"EligibleChildResource": {
"properties": {
"id": {
"type": "string",
"readOnly": true,
"description": "The resource scope Id."
},
"name": {
"type": "string",
"readOnly": true,
"description": "The resource name."
},
"type": {
"type": "string",
"readOnly": true,
"description": "The resource type."
}
},
"type": "object",
"description": "Eligible child resource"
},
"CloudError": {
"x-ms-external": true,
"properties": {
"error": {
"$ref": "#/definitions/CloudErrorBody"
}
},
"type": "object",
"description": "An error response from the service."
},
"CloudErrorBody": {
"x-ms-external": true,
"properties": {
"code": {
"type": "string",
"description": "An identifier for the error. Codes are invariant and are intended to be consumed programmatically."
},
"message": {
"type": "string",
"description": "A message describing the error, intended to be suitable for display in a user interface."
}
},
"type": "object",
"description": "An error response from the service."
}
}
}
Loading