Microsoft.Compute workloadSpaces/runtimeBindings 2026-11-01-preview

Bicep resource definition

The workloadSpaces/runtimeBindings resource type can be deployed with operations that target:

Resource groups - See resource group deployment commands

For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Compute/workloadSpaces/runtimeBindings resource, add the following Bicep to your template.

resource symbolicname 'Microsoft.Compute/workloadSpaces/runtimeBindings@2026-11-01-preview' = {
  parent: resourceSymbolicName
  kind: 'string'
  location: 'string'
  name: 'string'
  properties: {
    identityProfile: {
      executionIdentity: {
        scope: 'string'
        provisioningMode: 'string'
        // For remaining properties, see ExecutionIdentity objects
      }
    }
    networkProfile: {
      egressMode: 'string'
      subnetResourceId: 'string'
    }
    provisioningMode: 'string'
    // For remaining properties, see RuntimeBindingProperties objects
  }
  tags: {
    {customized property}: 'string'
  }
}

RuntimeBindingProperties objects

Set the provisioningMode property to specify the type of object.

For Managed, use:

{
  managedProfile: {
    offering: 'string'
    provider: 'string'
  }
  provisioningMode: 'Managed'
}

For Referenced, use:

{
  provisioningMode: 'Referenced'
  resourceId: 'string'
}

ExecutionIdentity objects

Set the provisioningMode property to specify the type of object.

For Referenced, use:

{
  provisioningMode: 'Referenced'
  userAssignedIdentityResourceId: 'string'
}

For ServiceManaged, use:

{
  provisioningMode: 'ServiceManaged'
}

Property Values

Microsoft.Compute/workloadSpaces/runtimeBindings

Name	Description	Value
kind	Metadata used by portal/tooling/etc to render different UX experiences for resources of the same type; e.g. ApiApps are a kind of Microsoft.Web/sites type. If supported, the resource provider must validate and persist this value.	'Kubernetes' 'ServerlessContainers'
location	The geo-location where the resource lives	string (required)
name	The resource name	string Constraints: Pattern = `^(?![.-])[A-Za-z0-9_.-]{1,64}$` (required)
parent	In Bicep, you can specify the parent resource for a child resource. You only need to add this property when the child resource is declared outside of the parent resource. For more information, see Child resource outside parent resource.	Symbolic name for resource of type: workloadSpaces
properties	The resource-specific properties for this resource.	RuntimeBindingProperties
tags	Resource tags	Dictionary of tag names and values. See Tags in templates

ExecutionIdentity

Name	Description	Value
provisioningMode	Set to 'Referenced' for type ReferencedExecutionIdentity. Set to 'ServiceManaged' for type ServiceManagedExecutionIdentity.	'Referenced' 'ServiceManaged' (required)
scope	The execution boundary across which the identity is shared.	'SandboxGroup' (required)

ManagedRuntimeBindingProperties

Name	Description	Value
managedProfile	The limited service-managed runtime configuration.	ManagedRuntimeProfile (required)
provisioningMode	Indicates whether Workload Manager owns or references the runtime.	'Managed' (required)

ManagedRuntimeProfile

Name	Description	Value
offering	The required product offering when the runtime binding kind is Kubernetes.	string
provider	The required provider when the runtime binding kind is ServerlessContainers.	string

ReferencedExecutionIdentity

Name	Description	Value
provisioningMode	Indicates whether the identity is managed by the service or supplied by the customer.	'Referenced' (required)
userAssignedIdentityResourceId	The customer-provided user-assigned identity.	string (required)

ReferencedRuntimeBindingProperties

Name	Description	Value
provisioningMode	Indicates whether Workload Manager owns or references the runtime.	'Referenced' (required)
resourceId	The existing customer-owned runtime resource.	string (required)

RuntimeBindingProperties

Name	Description	Value
identityProfile	The runtime identity configuration for a managed runtime.	RuntimeIdentityProfile
networkProfile	The runtime network configuration for a managed runtime.	RuntimeNetworkProfile
provisioningMode	Set to 'Managed' for type ManagedRuntimeBindingProperties. Set to 'Referenced' for type ReferencedRuntimeBindingProperties.	'Managed' 'Referenced' (required)

RuntimeIdentityProfile

Name	Description	Value
executionIdentity	The identity made available to the execution runtime.	ExecutionIdentity

RuntimeNetworkProfile

Name	Description	Value
egressMode	Indicates who manages runtime egress.	'CustomerManaged'
subnetResourceId	The customer-provided subnet used by the runtime.	string

ServiceManagedExecutionIdentity

Name	Description	Value
provisioningMode	Indicates whether the identity is managed by the service or supplied by the customer.	'ServiceManaged' (required)

TrackedResourceTags

Name	Description	Value

ARM template resource definition

The workloadSpaces/runtimeBindings resource type can be deployed with operations that target:

Resource groups - See resource group deployment commands For a list of changed properties in each API version, see change log.

Usage Examples

Resource format

To create a Microsoft.Compute/workloadSpaces/runtimeBindings resource, add the following JSON to your template.

{
  "type": "Microsoft.Compute/workloadSpaces/runtimeBindings",
  "apiVersion": "2026-11-01-preview",
  "name": "string",
  "kind": "string",
  "location": "string",
  "properties": {
    "identityProfile": {
      "executionIdentity": {
        "scope": "string",
        "provisioningMode": "string"
        // For remaining properties, see ExecutionIdentity objects
      }
    },
    "networkProfile": {
      "egressMode": "string",
      "subnetResourceId": "string"
    },
    "provisioningMode": "string"
    // For remaining properties, see RuntimeBindingProperties objects
  },
  "tags": {
    "{customized property}": "string"
  }
}

RuntimeBindingProperties objects

Set the provisioningMode property to specify the type of object.

For Managed, use:

{
  "managedProfile": {
    "offering": "string",
    "provider": "string"
  },
  "provisioningMode": "Managed"
}

For Referenced, use:

{
  "provisioningMode": "Referenced",
  "resourceId": "string"
}

ExecutionIdentity objects

Set the provisioningMode property to specify the type of object.

For Referenced, use:

{
  "provisioningMode": "Referenced",
  "userAssignedIdentityResourceId": "string"
}

For ServiceManaged, use:

{
  "provisioningMode": "ServiceManaged"
}

Property Values

Microsoft.Compute/workloadSpaces/runtimeBindings

Name	Description	Value
apiVersion	The api version	'2026-11-01-preview'
kind	Metadata used by portal/tooling/etc to render different UX experiences for resources of the same type; e.g. ApiApps are a kind of Microsoft.Web/sites type. If supported, the resource provider must validate and persist this value.	'Kubernetes' 'ServerlessContainers'
location	The geo-location where the resource lives	string (required)
name	The resource name	string Constraints: Pattern = `^(?![.-])[A-Za-z0-9_.-]{1,64}$` (required)
properties	The resource-specific properties for this resource.	RuntimeBindingProperties
tags	Resource tags	Dictionary of tag names and values. See Tags in templates
type	The resource type	'Microsoft.Compute/workloadSpaces/runtimeBindings'

ExecutionIdentity

Name	Description	Value
provisioningMode	Set to 'Referenced' for type ReferencedExecutionIdentity. Set to 'ServiceManaged' for type ServiceManagedExecutionIdentity.	'Referenced' 'ServiceManaged' (required)
scope	The execution boundary across which the identity is shared.	'SandboxGroup' (required)

ManagedRuntimeBindingProperties

Name	Description	Value
managedProfile	The limited service-managed runtime configuration.	ManagedRuntimeProfile (required)
provisioningMode	Indicates whether Workload Manager owns or references the runtime.	'Managed' (required)

ManagedRuntimeProfile

Name	Description	Value
offering	The required product offering when the runtime binding kind is Kubernetes.	string
provider	The required provider when the runtime binding kind is ServerlessContainers.	string

ReferencedExecutionIdentity

Name	Description	Value
provisioningMode	Indicates whether the identity is managed by the service or supplied by the customer.	'Referenced' (required)
userAssignedIdentityResourceId	The customer-provided user-assigned identity.	string (required)

ReferencedRuntimeBindingProperties

Name	Description	Value
provisioningMode	Indicates whether Workload Manager owns or references the runtime.	'Referenced' (required)
resourceId	The existing customer-owned runtime resource.	string (required)

RuntimeBindingProperties

Name	Description	Value
identityProfile	The runtime identity configuration for a managed runtime.	RuntimeIdentityProfile
networkProfile	The runtime network configuration for a managed runtime.	RuntimeNetworkProfile
provisioningMode	Set to 'Managed' for type ManagedRuntimeBindingProperties. Set to 'Referenced' for type ReferencedRuntimeBindingProperties.	'Managed' 'Referenced' (required)

RuntimeIdentityProfile

Name	Description	Value
executionIdentity	The identity made available to the execution runtime.	ExecutionIdentity

RuntimeNetworkProfile

Name	Description	Value
egressMode	Indicates who manages runtime egress.	'CustomerManaged'
subnetResourceId	The customer-provided subnet used by the runtime.	string

ServiceManagedExecutionIdentity

Name	Description	Value
provisioningMode	Indicates whether the identity is managed by the service or supplied by the customer.	'ServiceManaged' (required)

TrackedResourceTags

Name	Description	Value

Terraform (AzAPI provider) resource definition

The workloadSpaces/runtimeBindings resource type can be deployed with operations that target:

Resource groups For a list of changed properties in each API version, see change log.

Resource format

To create a Microsoft.Compute/workloadSpaces/runtimeBindings resource, add the following Terraform to your template.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.Compute/workloadSpaces/runtimeBindings@2026-11-01-preview"
  name = "string"
  parent_id = "string"
  location = "string"
  tags = {
    {customized property} = "string"
  }
  body = {
    kind = "string"
    properties = {
      identityProfile = {
        executionIdentity = {
          scope = "string"
          provisioningMode = "string"
          // For remaining properties, see ExecutionIdentity objects
        }
      }
      networkProfile = {
        egressMode = "string"
        subnetResourceId = "string"
      }
      provisioningMode = "string"
      // For remaining properties, see RuntimeBindingProperties objects
    }
  }
}

RuntimeBindingProperties objects

Set the provisioningMode property to specify the type of object.

For Managed, use:

{
  managedProfile = {
    offering = "string"
    provider = "string"
  }
  provisioningMode = "Managed"
}

For Referenced, use:

{
  provisioningMode = "Referenced"
  resourceId = "string"
}

ExecutionIdentity objects

Set the provisioningMode property to specify the type of object.

For Referenced, use:

{
  provisioningMode = "Referenced"
  userAssignedIdentityResourceId = "string"
}

For ServiceManaged, use:

{
  provisioningMode = "ServiceManaged"
}

Property Values

Microsoft.Compute/workloadSpaces/runtimeBindings

Name	Description	Value
kind	Metadata used by portal/tooling/etc to render different UX experiences for resources of the same type; e.g. ApiApps are a kind of Microsoft.Web/sites type. If supported, the resource provider must validate and persist this value.	'Kubernetes' 'ServerlessContainers'
location	The geo-location where the resource lives	string (required)
name	The resource name	string Constraints: Pattern = `^(?![.-])[A-Za-z0-9_.-]{1,64}$` (required)
parent_id	The ID of the resource that is the parent for this resource.	ID for resource of type: workloadSpaces
properties	The resource-specific properties for this resource.	RuntimeBindingProperties
tags	Resource tags	Dictionary of tag names and values.
type	The resource type	"Microsoft.Compute/workloadSpaces/runtimeBindings@2026-11-01-preview"

ExecutionIdentity

Name	Description	Value
provisioningMode	Set to 'Referenced' for type ReferencedExecutionIdentity. Set to 'ServiceManaged' for type ServiceManagedExecutionIdentity.	'Referenced' 'ServiceManaged' (required)
scope	The execution boundary across which the identity is shared.	'SandboxGroup' (required)

ManagedRuntimeBindingProperties

Name	Description	Value
managedProfile	The limited service-managed runtime configuration.	ManagedRuntimeProfile (required)
provisioningMode	Indicates whether Workload Manager owns or references the runtime.	'Managed' (required)

ManagedRuntimeProfile

Name	Description	Value
offering	The required product offering when the runtime binding kind is Kubernetes.	string
provider	The required provider when the runtime binding kind is ServerlessContainers.	string

ReferencedExecutionIdentity

Name	Description	Value
provisioningMode	Indicates whether the identity is managed by the service or supplied by the customer.	'Referenced' (required)
userAssignedIdentityResourceId	The customer-provided user-assigned identity.	string (required)

ReferencedRuntimeBindingProperties

Name	Description	Value
provisioningMode	Indicates whether Workload Manager owns or references the runtime.	'Referenced' (required)
resourceId	The existing customer-owned runtime resource.	string (required)

RuntimeBindingProperties

Name	Description	Value
identityProfile	The runtime identity configuration for a managed runtime.	RuntimeIdentityProfile
networkProfile	The runtime network configuration for a managed runtime.	RuntimeNetworkProfile
provisioningMode	Set to 'Managed' for type ManagedRuntimeBindingProperties. Set to 'Referenced' for type ReferencedRuntimeBindingProperties.	'Managed' 'Referenced' (required)

RuntimeIdentityProfile

Name	Description	Value
executionIdentity	The identity made available to the execution runtime.	ExecutionIdentity

RuntimeNetworkProfile

Name	Description	Value
egressMode	Indicates who manages runtime egress.	'CustomerManaged'
subnetResourceId	The customer-provided subnet used by the runtime.	string

ServiceManagedExecutionIdentity

Name	Description	Value
provisioningMode	Indicates whether the identity is managed by the service or supplied by the customer.	'ServiceManaged' (required)

TrackedResourceTags

Name	Description	Value

Feedback

Was this page helpful?

Last updated on 2026-10-20