com.azure.resourcemanager.authorization.models

Package containing the data models for AuthorizationManagementClient. Role based access control provides you a way to apply granular level policy administration down to individual resources or resource groups. These operations enable you to manage role definitions and role assignments. A role definition describes the set of actions that can be performed on resources. A role assignment grants access to Azure Active Directory users.

Classes

ApplicationAccountType

Defines values for Application Account Type

ApprovalMode

The type of rule.

ApprovalSettings

The approval settings.

ApprovalStage

The approval stage.

AssignmentType

Assignment type of the role assignment schedule.

BuiltInRole

Defines values for roles.

CertificateType

Defines values for certificate types.

ClassicAdministratorListResult

ClassicAdministrator list result information.

DenyAssignmentListResult

Deny assignment list operation result.

DenyAssignmentPermission

Deny assignment permissions.

EligibleChildResourcesListResult

Eligible child resources list operation result.

EnablementRules

The type of enablement rule.

ExpandedProperties

The ExpandedProperties model.

ExpandedPropertiesPrincipal

Details of the principal.

ExpandedPropertiesRoleDefinition

Details of role definition.

ExpandedPropertiesScope

Details of the resource scope.

MemberType

Membership type of the role assignment schedule.

NotificationDeliveryMechanism

The type of notification.

NotificationLevel

The notification level.

PermissionGetResult

Permissions information.

PolicyAssignmentProperties

Expanded info of resource scope, role definition and policy.

PolicyAssignmentPropertiesPolicy

Details of the policy.

PolicyAssignmentPropertiesRoleDefinition

Details of role definition.

PolicyAssignmentPropertiesScope

Details of the resource scope.

PolicyProperties

Expanded info of resource scope.

PolicyPropertiesScope

Details of the resource scope.

Principal

The name of the entity last modified it.

PrincipalType

The principal type of the assigned principal ID.

ProviderOperation

Operation.

ProviderOperationsMetadataListResult

Provider operations metadata list.

RecipientType

The recipient type.

RequestType

The type of the role assignment schedule request.

ResourceType

Resource Type.

RoleAssignmentCreateParameters

Role assignment create parameters.

RoleAssignmentListResult

Role assignment list operation result.

RoleAssignmentScheduleInstanceListResult

Role assignment schedule instance list operation result.

RoleAssignmentScheduleListResult

Role assignment schedule list operation result.

RoleAssignmentScheduleRequestListResult

Role assignment schedule request list operation result.

RoleAssignmentScheduleRequestPropertiesScheduleInfo

Schedule info of the role assignment schedule.

RoleAssignmentScheduleRequestPropertiesScheduleInfoExpiration

Expiration of the role assignment schedule.

RoleAssignmentScheduleRequestPropertiesTicketInfo

Ticket Info of the role assignment.

RoleDefinitionListResult

Role definition list operation result.

RoleEligibilityScheduleInstanceListResult

Role eligibility schedule instance list operation result.

RoleEligibilityScheduleListResult

role eligibility schedule list operation result.

RoleEligibilityScheduleRequestListResult

Role eligibility schedule request list operation result.

RoleEligibilityScheduleRequestPropertiesScheduleInfo

Schedule info of the role eligibility schedule.

RoleEligibilityScheduleRequestPropertiesScheduleInfoExpiration

Expiration of the role eligibility schedule.

RoleEligibilityScheduleRequestPropertiesTicketInfo

Ticket Info of the role eligibility.

RoleManagementPolicyApprovalRule

The role management policy approval rule.

RoleManagementPolicyAssignmentListResult

Role management policy assignment list operation result.

RoleManagementPolicyAuthenticationContextRule

The role management policy authentication context rule.

RoleManagementPolicyEnablementRule

The role management policy enablement rule.

RoleManagementPolicyExpirationRule

The role management policy expiration rule.

RoleManagementPolicyListResult

Role management policy list operation result.

RoleManagementPolicyNotificationRule

The role management policy notification rule.

RoleManagementPolicyRule

The role management policy rule.

RoleManagementPolicyRuleTarget

The role management policy rule target.

RoleManagementPolicyRuleType

The type of rule.

Status

The status of the role assignment schedule.

Type

Type of the role assignment schedule expiration.

UserSet

The detail of a user.

UserType

The type of user.

Interfaces

ActiveDirectoryApplication

An immutable client-side representation of an Azure AD application.

ActiveDirectoryApplication.Definition

Container interface for all the definitions that need to be implemented.

ActiveDirectoryApplication.DefinitionStages

Grouping of all the application definition stages.

ActiveDirectoryApplication.DefinitionStages.Blank

The first stage of the application definition.

ActiveDirectoryApplication.DefinitionStages.WithAccountType

The stage of application definition allowing specifying the application account type.

ActiveDirectoryApplication.DefinitionStages.WithCreate

An application definition with sufficient inputs to create a new application in the cloud, but exposing additional optional inputs to specify.

ActiveDirectoryApplication.DefinitionStages.WithCredential

The stage of application definition allowing specifying identifier keys.

ActiveDirectoryApplication.DefinitionStages.WithIdentifierUrl

The stage of application definition allowing specifying identifier URLs.

ActiveDirectoryApplication.DefinitionStages.WithMultiTenant

Deprecated

use WithAccountType

ActiveDirectoryApplication.DefinitionStages.WithReplyUrl

The stage of application definition allowing specifying reply URLs.

ActiveDirectoryApplication.DefinitionStages.WithSignOnUrl

The stage of application definition allowing specifying the sign on URL.

ActiveDirectoryApplication.Update

The template for an application update operation, containing all the settings that can be modified.

ActiveDirectoryApplication.UpdateStages

Grouping of all the application update stages.

ActiveDirectoryApplication.UpdateStages.WithAccountType

The stage of application update allowing specifying the application account type.

ActiveDirectoryApplication.UpdateStages.WithCredential

The stage of application update allowing specifying identifier keys.

ActiveDirectoryApplication.UpdateStages.WithIdentifierUrl

The stage of application update allowing specifying identifier URLs.

ActiveDirectoryApplication.UpdateStages.WithMultiTenant

Deprecated

use WithAccountType

ActiveDirectoryApplication.UpdateStages.WithReplyUrl

The stage of application update allowing specifying reply URLs.

ActiveDirectoryApplication.UpdateStages.WithSignOnUrl

The stage of application update allowing specifying the sign on URL.

ActiveDirectoryApplications

Entry point to application management API.

ActiveDirectoryGroup

An immutable client-side representation of an Azure AD group.

ActiveDirectoryGroup.Definition

Container interface for all the definitions that need to be implemented.

ActiveDirectoryGroup.DefinitionStages

Grouping of all the AD group definition stages.

ActiveDirectoryGroup.DefinitionStages.Blank

The first stage of the AD group definition.

ActiveDirectoryGroup.DefinitionStages.WithCreate

An AD group definition with sufficient inputs to create a new group in the cloud, but exposing additional optional inputs to specify.

ActiveDirectoryGroup.DefinitionStages.WithEmailAlias

An AD Group definition allowing mail nickname to be specified.

ActiveDirectoryGroup.DefinitionStages.WithMember

An AD Group definition allowing members to be added.

ActiveDirectoryGroup.Update

The template for a group update operation, containing all the settings that can be modified.

ActiveDirectoryGroup.UpdateStages

Grouping of all the AD group update stages.

ActiveDirectoryGroup.UpdateStages.WithMember

An AD Group definition allowing members to be added or removed.

ActiveDirectoryGroups

Entry point to AD group management API.

ActiveDirectoryObject

An immutable client-side representation of an Azure AD object.

ActiveDirectoryUser

An immutable client-side representation of an Azure AD user.

ActiveDirectoryUser.Definition

Container interface for all the definitions that need to be implemented.

ActiveDirectoryUser.DefinitionStages

Grouping of all the user definition stages.

ActiveDirectoryUser.DefinitionStages.Blank

The first stage of the user definition.

ActiveDirectoryUser.DefinitionStages.WithAccontEnabled

A user definition allowing specifying whether the account is enabled.

ActiveDirectoryUser.DefinitionStages.WithCreate

An AD user definition with sufficient inputs to create a new user in the cloud, but exposing additional optional inputs to specify.

ActiveDirectoryUser.DefinitionStages.WithPassword

A user definition allowing password to be specified.

ActiveDirectoryUser.DefinitionStages.WithPromptToChangePasswordOnLogin

A user definition allowing setting whether the user should change password on the next login.

ActiveDirectoryUser.DefinitionStages.WithUsageLocation

A user definition allowing usage location to be specified.

ActiveDirectoryUser.DefinitionStages.WithUserPrincipalName

A user definition allowing user principal name to be specified.

ActiveDirectoryUser.Update

The template for a user update operation, containing all the settings that can be modified.

ActiveDirectoryUser.UpdateStages

Group of all the user update stages.

ActiveDirectoryUser.UpdateStages.WithAccontEnabled

A user update allowing specifying whether the account is enabled.

ActiveDirectoryUser.UpdateStages.WithPassword

A user update allowing password to be specified.

ActiveDirectoryUser.UpdateStages.WithPromptToChangePasswordOnLogin

A user update allowing setting whether the user should change password on the next login.

ActiveDirectoryUser.UpdateStages.WithUsageLocation

A user update allowing usage location to be specified.

ActiveDirectoryUsers

Entry point to AD user management API.

CertificateCredential

An immutable client-side representation of an Azure AD credential.

CertificateCredential.Definition<ParentT>

The entirety of a credential definition.

CertificateCredential.DefinitionStages

Grouping of credential definition stages applicable as part of a application or service principal creation.

CertificateCredential.DefinitionStages.Blank<ParentT>

The first stage of a credential definition.

CertificateCredential.DefinitionStages.WithAttach<ParentT>

The final stage of the credential definition.

CertificateCredential.DefinitionStages.WithAuthFile<ParentT>

A credential definition stage allowing exporting the auth file for the service principal.

CertificateCredential.DefinitionStages.WithAuthFileCertificate<ParentT>

A credential definition stage allowing specifying the private key for exporting an auth file.

CertificateCredential.DefinitionStages.WithAuthFileCertificatePassword<ParentT>

A credential definition stage allowing specifying the password for the private key for exporting an auth file.

CertificateCredential.DefinitionStages.WithCertificateType<ParentT>

The credential definition stage allowing the certificate type to be set.

CertificateCredential.DefinitionStages.WithDuration<ParentT>

The credential definition stage allowing the duration of key validity to be set.

CertificateCredential.DefinitionStages.WithPublicKey<ParentT>

The credential definition stage allowing the public key to be set.

CertificateCredential.DefinitionStages.WithStartDate<ParentT>

The credential definition stage allowing start date to be set.

CertificateCredential.DefinitionStages.WithSymmetricKey<ParentT>

The credential definition stage allowing the secret key to be set.

Credential

An immutable client-side representation of an Azure AD credential.

PasswordCredential

An immutable client-side representation of an Azure AD credential.

PasswordCredential.Definition<ParentT>

The entirety of a credential definition.

PasswordCredential.DefinitionStages

Grouping of credential definition stages applicable as part of a application or service principal creation.

PasswordCredential.DefinitionStages.Blank<ParentT>

The first stage of a credential definition.

PasswordCredential.DefinitionStages.WithAttach<ParentT>

The final stage of the credential definition.

PasswordCredential.DefinitionStages.WithAuthFile<ParentT>

A credential definition stage allowing exporting the auth file for the service principal.

PasswordCredential.DefinitionStages.WithConsumer<ParentT>

A credential definition stage allowing consuming the credential after creation.

PasswordCredential.DefinitionStages.WithDuration<ParentT>

The credential definition stage allowing the duration of key validity to be set.

PasswordCredential.DefinitionStages.WithStartDate<ParentT>

The credential definition stage allowing start date to be set.

PasswordCredential.DefinitionStages.WithSubscriptionInAuthFile<ParentT>

A credential definition stage allowing the subscription in the auth file to be set.

Permission

An immutable client-side representation of a permission.

RoleAssignment

An immutable client-side representation of an Azure AD role assignment.

RoleAssignment.Definition

Container interface for all the definitions that need to be implemented.

RoleAssignment.DefinitionStages

Grouping of all the role assignment definition stages.

RoleAssignment.DefinitionStages.Blank

The first stage of the role assignment definition.

RoleAssignment.DefinitionStages.WithAssignee

The stage of role assignment definition allowing specifying the assignee information.

RoleAssignment.DefinitionStages.WithCreate

An role assignment definition with sufficient inputs to create a new role assignment in the cloud, but exposing additional optional inputs to specify.

RoleAssignment.DefinitionStages.WithDescription

The stage of role assignment definition allowing specifying the description.

RoleAssignment.DefinitionStages.WithRole

The stage of role assignment definition allowing specifying the role.

RoleAssignment.DefinitionStages.WithScope

The stage of role assignment definition allowing specifying the scope of the assignment.

RoleAssignments

Entry point to role assignment management API.

RoleDefinition

An immutable client-side representation of an Azure AD role definition.

RoleDefinitions

Entry point to role definition management API.

ServicePrincipal

An immutable client-side representation of an Azure AD service principal.

ServicePrincipal.Definition

Container interface for all the definitions that need to be implemented.

ServicePrincipal.DefinitionStages

Grouping of all the service principal definition stages.

ServicePrincipal.DefinitionStages.Blank

The first stage of the service principal definition.

ServicePrincipal.DefinitionStages.WithApplication

A service principal definition allowing application to be specified.

ServicePrincipal.DefinitionStages.WithCreate

A service principal definition with sufficient inputs to create a new service principal in the cloud, but exposing additional optional inputs to specify.

ServicePrincipal.DefinitionStages.WithCredential

A service principal definition allowing credentials to be specified.

ServicePrincipal.DefinitionStages.WithRoleAssignment

A service principal definition allowing role assignments to be added.

ServicePrincipal.Update

The template for a service principal update operation, containing all the settings that can be modified.

ServicePrincipal.UpdateStages

Grouping of all the service principal update stages.

ServicePrincipal.UpdateStages.WithCredential

A service principal update allowing credentials to be specified.

ServicePrincipal.UpdateStages.WithRoleAssignment

A service principal update allowing role assignments to be added.

ServicePrincipals

Entry point to service principal management API.