Policy Definition Versions - List All At Management Group

Service:

Policy

API Version:

2023-04-01

Lists all policy definition versions at management group scope.
This operation lists all the policy definition versions for all policy definitions at the management group scope.

POST https://management.azure.com/providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/listPolicyDefinitionVersions?api-version=2023-04-01

URI Parameters

Name	In	Required	Type	Description
managementGroupName	path	True	string	The name of the management group. The name is case insensitive.
api-version	query	True	string	The API version to use for this operation.

Responses

Name	Type	Description
200 OK	PolicyDefinitionVersionListResult	OK - Returns an array of policy definition versions.
Other Status Codes	CloudError	Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

List all policy definition versions at management group

Sample request

HTTP

POST https://management.azure.com/providers/Microsoft.Management/managementGroups/MyManagementGroup/providers/Microsoft.Authorization/listPolicyDefinitionVersions?api-version=2023-04-01

Python

from azure.identity import DefaultAzureCredential

from azure.mgmt.resource import PolicyClient

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-resource
# USAGE
    python list_all_policy_definition_versions_by_management_group.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = PolicyClient(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.policy_definition_versions.list_all_at_management_group(
        management_group_name="MyManagementGroup",
    )
    print(response)


# x-ms-original-file: specification/resources/resource-manager/Microsoft.Authorization/stable/2023-04-01/examples/listAllPolicyDefinitionVersionsByManagementGroup.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Sample response

Status code:

200

{
  "value": [
    {
      "id": "/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming/versions/1.2.1",
      "type": "Microsoft.Authorization/policyDefinitions/versions",
      "name": "1.2.1",
      "properties": {
        "mode": "All",
        "displayName": "Naming Convention",
        "description": "Force resource names to begin with 'prefix' and end with 'suffix'",
        "metadata": {
          "category": "Naming"
        },
        "version": "1.2.1",
        "policyRule": {
          "if": {
            "not": {
              "field": "name",
              "like": "[concat(parameters('prefix'), '*', parameters('suffix'))]"
            }
          },
          "then": {
            "effect": "deny"
          }
        },
        "parameters": {
          "prefix": {
            "type": "String",
            "metadata": {
              "displayName": "Prefix",
              "description": "Resource name prefix"
            }
          },
          "suffix": {
            "type": "String",
            "metadata": {
              "displayName": "Suffix",
              "description": "Resource name suffix"
            }
          }
        },
        "policyType": "Custom"
      }
    },
    {
      "id": "/providers/Microsoft.Management/managementgroups/MyManagementGroup/providers/Microsoft.Authorization/policyDefinitions/ResourceNaming/versions/1.0.0",
      "type": "Microsoft.Authorization/policyDefinitions/versions",
      "name": "1.0.0",
      "properties": {
        "mode": "All",
        "displayName": "Naming Convention",
        "description": "Force resource names to begin with 'prefix' and end with 'suffix'",
        "metadata": {
          "category": "Naming"
        },
        "version": "1.2.1",
        "policyRule": {
          "if": {
            "not": {
              "field": "name",
              "like": "[concat(parameters('prefix'), '-*', parameters('suffix'))]"
            }
          },
          "then": {
            "effect": "deny"
          }
        },
        "parameters": {
          "prefix": {
            "type": "String",
            "metadata": {
              "displayName": "Prefix",
              "description": "Resource name prefix"
            }
          },
          "suffix": {
            "type": "String",
            "metadata": {
              "displayName": "Suffix",
              "description": "Resource name suffix"
            }
          }
        },
        "policyType": "Custom"
      }
    }
  ]
}

Definitions

Name	Description
CloudError	An error response from a policy operation.
createdByType	The type of identity that created the resource.
ErrorAdditionalInfo	The resource management error additional info.
ErrorResponse	Error Response
Metadata	General metadata for the parameter.
ParameterDefinitionsValue	The definition of a parameter that can be provided to the policy.
parameterType	The data type of the parameter.
PolicyDefinitionVersion	The ID of the policy definition version.
PolicyDefinitionVersionListResult	List of policy definition versions.
policyType	The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
systemData	Metadata pertaining to creation and last modification of the resource.

CloudError

An error response from a policy operation.

Name	Type	Description
error	ErrorResponse	Error Response Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.)

createdByType

The type of identity that created the resource.

Name	Type	Description
Application	string
Key	string
ManagedIdentity	string
User	string

ErrorAdditionalInfo

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

ErrorResponse

Error Response

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	ErrorResponse[]	The error details.
message	string	The error message.
target	string	The error target.

Metadata

General metadata for the parameter.

Name	Type	Description
assignPermissions	boolean	Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description	string	The description of the parameter.
displayName	string	The display name for the parameter.
strongType	string	Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.

ParameterDefinitionsValue

The definition of a parameter that can be provided to the policy.

Name	Type	Description
allowedValues	object[]	The allowed values for the parameter.
defaultValue	object	The default value for the parameter if no value is provided.
metadata	Metadata	General metadata for the parameter.
schema	object	Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type	parameterType	The data type of the parameter.

parameterType

The data type of the parameter.

Name	Type	Description
Array	string
Boolean	string
DateTime	string
Float	string
Integer	string
Object	string
String	string

PolicyDefinitionVersion

The ID of the policy definition version.

Name	Type	Default value	Description
id	string		The ID of the policy definition version.
name	string		The name of the policy definition version.
properties.description	string		The policy definition description.
properties.displayName	string		The display name of the policy definition.
properties.metadata	object		The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs.
properties.mode	string	Indexed	The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
properties.parameters	<string,  ParameterDefinitionsValue>		The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
properties.policyRule	object		The policy rule.
properties.policyType	policyType		The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
properties.version	string		The policy definition version in #.#.# format.
systemData	systemData		The system metadata relating to this resource.
type	string		The type of the resource (Microsoft.Authorization/policyDefinitions/versions).

PolicyDefinitionVersionListResult

List of policy definition versions.

Name	Type	Description
nextLink	string	The URL to use for getting the next set of results.
value	PolicyDefinitionVersion[]	An array of policy definitions versions.

policyType

The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.

Name	Type	Description
BuiltIn	string
Custom	string
NotSpecified	string
Static	string

systemData

Metadata pertaining to creation and last modification of the resource.

Name	Type	Description
createdAt	string	The timestamp of resource creation (UTC).
createdBy	string	The identity that created the resource.
createdByType	createdByType	The type of identity that created the resource.
lastModifiedAt	string	The timestamp of resource last modification (UTC)
lastModifiedBy	string	The identity that last modified the resource.
lastModifiedByType	createdByType	The type of identity that last modified the resource.