Sdílet prostřednictvím

Role Management Policies - List For Scope

  • Reference
Service:
Authorization
API Version:
2020-10-01

Získá zásady správy rolí pro obor prostředku.

GET https://management.azure.com/{scope}/providers/Microsoft.Authorization/roleManagementPolicies?api-version=2020-10-01

Parametry identifikátoru URI

Name V Vyžadováno Typ Description
scope
 path True

string

Rozsah zásad správy rolí.
api-version
 query True

string

Verze rozhraní API, která se má použít pro tuto operaci.

Odpovědi

Name Typ Description
200 OK

RoleManagementPolicyListResult

OK – vrátí pole zásad správy rolí.
Other Status Codes

CloudError

Chybová odpověď popisující, proč operace selhala.

Zabezpečení

azure_auth

Tok Azure Active Directory OAuth2

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation zosobnění uživatelského účtu

Příklady

GetRoleManagementPolicyByRoleDefinitionFilter

Sample Request

GET https://management.azure.com/providers/Microsoft.Subscription/subscriptions/129ff972-28f8-46b8-a726-e497be039368/providers/Microsoft.Authorization/roleManagementPolicies?api-version=2020-10-01

Sample Response

Status code:
200 
{
  "value": [
    {
      "properties": {
        "scope": "/subscriptions/129ff972-28f8-46b8-a726-e497be039368",
        "displayName": null,
        "description": null,
        "isOrganizationDefault": false,
        "lastModifiedDateTime": "2021-03-17T02:54:27.167+00:00",
        "lastModifiedBy": {
          "id": null,
          "displayName": "Admin",
          "type": null,
          "email": null
        },
        "rules": [
          {
            "enabledRules": [],
            "id": "Enablement_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_eligible@test.com"
            ],
            "id": "Notification_Admin_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_eligible@test.com"
            ],
            "id": "Notification_Requestor_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_eligible@test.com"
            ],
            "id": "Notification_Approver_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification"
            ],
            "id": "Enablement_Admin_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": false,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_member@test.com"
            ],
            "id": "Notification_Admin_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_member@test.com"
            ],
            "id": "Notification_Requestor_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_member@test.com"
            ],
            "id": "Notification_Approver_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "setting": {
              "isApprovalRequired": true,
              "isApprovalRequiredForExtension": false,
              "isRequestorJustificationRequired": true,
              "approvalMode": "SingleStage",
              "approvalStages": [
                {
                  "approvalStageTimeOutInDays": 1,
                  "isApproverJustificationRequired": true,
                  "escalationTimeInMinutes": 0,
                  "primaryApprovers": [
                    {
                      "id": "2385b0f3-5fa9-43cf-8ca4-b01dc97298cd",
                      "description": "amansw_new_group",
                      "isBackup": false,
                      "userType": "Group"
                    },
                    {
                      "id": "2f4913c9-d15b-406a-9946-1d66a28f2690",
                      "description": "amansw_group",
                      "isBackup": false,
                      "userType": "Group"
                    }
                  ],
                  "isEscalationEnabled": false,
                  "escalationApprovers": null
                }
              ]
            },
            "id": "Approval_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyApprovalRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isEnabled": false,
            "claimValue": "",
            "id": "AuthenticationContext_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyAuthenticationContextRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification",
              "Ticketing"
            ],
            "id": "Enablement_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "PT7H",
            "id": "Expiration_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_enduser_member@test.com"
            ],
            "id": "Notification_Admin_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_enduser_member@test.com"
            ],
            "id": "Notification_Requestor_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": true,
            "notificationLevel": "Critical",
            "notificationRecipients": null,
            "id": "Notification_Approver_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          }
        ],
        "effectiveRules": [
          {
            "enabledRules": [],
            "id": "Enablement_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_eligible@test.com"
            ],
            "id": "Notification_Admin_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_eligible@test.com"
            ],
            "id": "Notification_Requestor_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_eligible@test.com"
            ],
            "id": "Notification_Approver_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification"
            ],
            "id": "Enablement_Admin_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": false,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_member@test.com"
            ],
            "id": "Notification_Admin_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_member@test.com"
            ],
            "id": "Notification_Requestor_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_member@test.com"
            ],
            "id": "Notification_Approver_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "setting": {
              "isApprovalRequired": true,
              "isApprovalRequiredForExtension": false,
              "isRequestorJustificationRequired": true,
              "approvalMode": "SingleStage",
              "approvalStages": [
                {
                  "approvalStageTimeOutInDays": 1,
                  "isApproverJustificationRequired": true,
                  "escalationTimeInMinutes": 0,
                  "primaryApprovers": [
                    {
                      "id": "2385b0f3-5fa9-43cf-8ca4-b01dc97298cd",
                      "description": "amansw_new_group",
                      "isBackup": false,
                      "userType": "Group"
                    },
                    {
                      "id": "2f4913c9-d15b-406a-9946-1d66a28f2690",
                      "description": "amansw_group",
                      "isBackup": false,
                      "userType": "Group"
                    }
                  ],
                  "isEscalationEnabled": false,
                  "escalationApprovers": null
                }
              ]
            },
            "id": "Approval_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyApprovalRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isEnabled": false,
            "claimValue": "",
            "id": "AuthenticationContext_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyAuthenticationContextRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification",
              "Ticketing"
            ],
            "id": "Enablement_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "PT7H",
            "id": "Expiration_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_enduser_member@test.com"
            ],
            "id": "Notification_Admin_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_enduser_member@test.com"
            ],
            "id": "Notification_Requestor_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": true,
            "notificationLevel": "Critical",
            "notificationRecipients": null,
            "id": "Notification_Approver_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          }
        ],
        "policyProperties": {
          "scope": {
            "id": "/subscriptions/129ff972-28f8-46b8-a726-e497be039368",
            "displayName": "Pay-As-You-Go",
            "type": "subscription"
          }
        }
      },
      "name": "570c3619-7688-4b34-b290-2b8bb3ccab2a",
      "id": "/subscriptions/129ff972-28f8-46b8-a726-e497be039368/providers/Microsoft.Authorization/roleManagementPolicies/570c3619-7688-4b34-b290-2b8bb3ccab2a",
      "type": "Microsoft.Authorization/RoleManagementPolicies"
    }
  ]
}

Definice

Name Description
CloudError

Chybová odpověď ze služby.
CloudErrorBody

Chybová odpověď ze služby.
PolicyProperties

Rozšířené informace o rozsahu prostředků
Principal

Název entity, která ji naposledy změnila
RoleManagementPolicy

Zásady správy rolí
RoleManagementPolicyListResult

Výsledek operace se seznamem zásad správy rolí
Scope

Podrobnosti o rozsahu prostředků

CloudError

Chybová odpověď ze služby.

Name Typ Description
error

CloudErrorBody

Chybová odpověď ze služby.

CloudErrorBody

Chybová odpověď ze služby.

Name Typ Description
code

string

Identifikátor chyby. Kódy jsou invariantní a mají být využívány programově.
message

string

Zpráva popisující chybu, která má být vhodná pro zobrazení v uživatelském rozhraní.

PolicyProperties

Rozšířené informace o rozsahu prostředků

Name Typ Description
scope

Scope

Podrobnosti o rozsahu prostředků

Principal

Název entity, která ji naposledy změnila

Name Typ Description
displayName

string

Název objektu zabezpečení, který provedl změny
email

string

Email objektu zabezpečení
id

string

ID objektu zabezpečení, který provedl změny
type

string

Typ objektu zabezpečení, jako je uživatel, skupina atd.

RoleManagementPolicy

Zásady správy rolí

Name Typ Description
id

string

ID zásad správy rolí
name

string

Název zásady správy rolí
properties.description

string

Popis zásad správy rolí
properties.displayName

string

Zobrazovaný název zásad správy rolí
properties.effectiveRules

RoleManagementPolicyRule[]

Vypočítané pravidlo jen pro čtení použité na zásadu
properties.isOrganizationDefault

boolean

Zásady správy rolí jsou výchozí.
properties.lastModifiedBy

Principal

Název entity, která ji naposledy změnila
properties.lastModifiedDateTime

string

Datum a čas poslední změny.
properties.policyProperties

PolicyProperties

Další vlastnosti oboru
properties.rules

RoleManagementPolicyRule[]

Pravidlo použité na zásadu
properties.scope

string

Obor zásad správy rolí
type

string

Typ zásad správy rolí.

RoleManagementPolicyListResult

Výsledek operace se seznamem zásad správy rolí

Name Typ Description
nextLink

string

Adresa URL, která se má použít pro získání další sady výsledků.
value

RoleManagementPolicy[]

Seznam zásad správy rolí

Scope

Podrobnosti o rozsahu prostředků

Name Typ Description
displayName

string

Zobrazovaný název prostředku
id

string

ID oboru prostředku
type

string

Typ prostředku