EligibleAuthorization Class

Eligible authorization tuple containing principle Id (of user/service principal/security group), role definition id, and the just-in-time access setting.

All required parameters must be populated in order to send to Azure.

Inheritance

msrest.serialization.Model

EligibleAuthorization

Constructor

EligibleAuthorization(*, principal_id: str, role_definition_id: str, principal_id_display_name: str | None = None, just_in_time_access_policy: JustInTimeAccessPolicy | None = None, **kwargs)

Parameters

Name	Description
principal_id Required	str Required. Principal Id of the security group/service principal/user that would be delegated permissions to the projected subscription.
principal_id_display_name Required	str Display name of the principal Id.
role_definition_id Required	str Required. The role definition identifier. This role will delegate all the permissions that the security group/service principal/user must have on the projected subscription. This role cannot be an owner role.
just_in_time_access_policy Required	JustInTimeAccessPolicy Just-in-time access policy setting.

Keyword-Only Parameters

Name	Description
principal_id Required
role_definition_id Required
principal_id_display_name Required
just_in_time_access_policy Required