Authorization Class

Authorization tuple containing principal Id (of user/service principal/security group) and role definition id.

All required parameters must be populated in order to send to Azure.

Inheritance

msrest.serialization.Model

Authorization

Constructor

Authorization(*, principal_id: str, role_definition_id: str, principal_id_display_name: str | None = None, delegated_role_definition_ids: List[str] | None = None, **kwargs)

Parameters

Name	Description
principal_id Required	str Required. Principal Id of the security group/service principal/user that would be assigned permissions to the projected subscription.
principal_id_display_name Required	str Display name of the principal Id.
role_definition_id Required	str Required. The role definition identifier. This role will define all the permissions that the security group/service principal/user must have on the projected subscription. This role cannot be an owner role.
delegated_role_definition_ids Required	list[str] The delegatedRoleDefinitionIds field is required when the roleDefinitionId refers to the User Access Administrator Role. It is the list of role definition ids which define all the permissions that the user in the authorization can assign to other security groups/service principals/users.

Keyword-Only Parameters

Name	Description
principal_id Required
role_definition_id Required
principal_id_display_name Required
delegated_role_definition_ids Required