Permission Class

Role definition permissions.

Variables are only populated by the server, and will be ignored when sending a request.

Constructor

Permission(*, actions: List[str] | None = None, not_actions: List[str] | None = None, data_actions: List[str] | None = None, not_data_actions: List[str] | None = None, **kwargs: Any)

Keyword-Only Parameters

Name	Description
actions	list[str] Allowed actions. Default value: None
not_actions	list[str] Denied actions. Default value: None
data_actions	list[str] Allowed Data actions. Default value: None
not_data_actions	list[str] Denied Data actions. Default value: None

Variables

Name	Description
actions	list[str] Allowed actions.
not_actions	list[str] Denied actions.
data_actions	list[str] Allowed Data actions.
not_data_actions	list[str] Denied Data actions.
condition	str The conditions on the role definition. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'.
condition_version	str Version of the condition. Currently the only accepted value is '2.0'.