편집

다음을 통해 공유

unifiedRoleManagementPolicy resource type

  • 아티클

Namespace: microsoft.graph

Specifies the various policies associated with scopes and roles. For policies that apply to Azure RBAC, use the Azure REST PIM API for role management policies.

Inherits from entity.

Methods

Method Return type Description
List unifiedRoleManagementPolicy collection Get role management policies and their details.
Get unifiedRoleManagementPolicy Retrieve the details of a role management policy.
Update unifiedRoleManagementPolicy Update a role management policy.
List rules unifiedRoleManagementPolicyRule collection Get the rules defined for a role management policy.
Get rule unifiedRoleManagementPolicyRule Retrieve a rule defined for a role management policy.
Update rule unifiedRoleManagementPolicyRule Update a rule defined for a role management policy.

Properties

Property Type Description
description String Description for the policy.
displayName String Display name for the policy.
id String Unique identifier for the policy.
isOrganizationDefault Boolean This can only be set to true for a single tenant-wide policy which will apply to all scopes and roles. Set the scopeId to / and scopeType to Directory. Supports $filter (eq, ne).
lastModifiedBy identity The identity who last modified the role setting.
lastModifiedDateTime DateTimeOffset The time when the role setting was last modified.
scopeId String The identifier of the scope where the policy is created. Can be / for the tenant or a group ID. Required.
scopeType String The type of the scope where the policy is created. One of Directory, DirectoryRole, Group. Required.

Relationships

Relationship Type Description
effectiveRules unifiedRoleManagementPolicyRule collection The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand.
rules unifiedRoleManagementPolicyRule collection The collection of rules like approval rules and expiration rules. Supports $expand.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.unifiedRoleManagementPolicy",
  "id": "String (identifier)",
  "displayName": "String",
  "description": "String",
  "isOrganizationDefault": "Boolean",
  "scopeId": "String",
  "scopeType": "String",
  "lastModifiedDateTime": "String (timestamp)",
  "lastModifiedBy": {
    "@odata.type": "microsoft.graph.identity"
  }
}