Partager via

Role Management Policies - List For Scope

  • Référence
Service:
Authorization
Version d'API:
2020-10-01

Obtient les stratégies de gestion des rôles pour une étendue de ressource.

GET https://management.azure.com/{scope}/providers/Microsoft.Authorization/roleManagementPolicies?api-version=2020-10-01

Paramètres URI

Nom Dans Obligatoire Type Description
scope
 path True

string

Étendue de la stratégie de gestion des rôles.
api-version
 query True

string

Version de l’API à utiliser pour cette opération.

Réponses

Nom Type Description
200 OK

RoleManagementPolicyListResult

OK : retourne un tableau de stratégies de gestion des rôles.
Other Status Codes

CloudError

Réponse d’erreur décrivant la raison de l’échec de l’opération.

Sécurité

azure_auth

Flux OAuth2 Azure Active Directory

Type: oauth2
Flux: implicit
URL d’autorisation: https://login.microsoftonline.com/common/oauth2/authorize

Étendues

Nom Description
user_impersonation Emprunter l’identité de votre compte d’utilisateur

Exemples

GetRoleManagementPolicyByRoleDefinitionFilter

Exemple de requête

GET https://management.azure.com/providers/Microsoft.Subscription/subscriptions/129ff972-28f8-46b8-a726-e497be039368/providers/Microsoft.Authorization/roleManagementPolicies?api-version=2020-10-01

Exemple de réponse

Code d’état:
200 
{
  "value": [
    {
      "properties": {
        "scope": "/subscriptions/129ff972-28f8-46b8-a726-e497be039368",
        "displayName": null,
        "description": null,
        "isOrganizationDefault": false,
        "lastModifiedDateTime": "2021-03-17T02:54:27.167+00:00",
        "lastModifiedBy": {
          "id": null,
          "displayName": "Admin",
          "type": null,
          "email": null
        },
        "rules": [
          {
            "enabledRules": [],
            "id": "Enablement_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_eligible@test.com"
            ],
            "id": "Notification_Admin_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_eligible@test.com"
            ],
            "id": "Notification_Requestor_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_eligible@test.com"
            ],
            "id": "Notification_Approver_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification"
            ],
            "id": "Enablement_Admin_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": false,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_member@test.com"
            ],
            "id": "Notification_Admin_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_member@test.com"
            ],
            "id": "Notification_Requestor_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_member@test.com"
            ],
            "id": "Notification_Approver_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "setting": {
              "isApprovalRequired": true,
              "isApprovalRequiredForExtension": false,
              "isRequestorJustificationRequired": true,
              "approvalMode": "SingleStage",
              "approvalStages": [
                {
                  "approvalStageTimeOutInDays": 1,
                  "isApproverJustificationRequired": true,
                  "escalationTimeInMinutes": 0,
                  "primaryApprovers": [
                    {
                      "id": "2385b0f3-5fa9-43cf-8ca4-b01dc97298cd",
                      "description": "amansw_new_group",
                      "isBackup": false,
                      "userType": "Group"
                    },
                    {
                      "id": "2f4913c9-d15b-406a-9946-1d66a28f2690",
                      "description": "amansw_group",
                      "isBackup": false,
                      "userType": "Group"
                    }
                  ],
                  "isEscalationEnabled": false,
                  "escalationApprovers": null
                }
              ]
            },
            "id": "Approval_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyApprovalRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isEnabled": false,
            "claimValue": "",
            "id": "AuthenticationContext_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyAuthenticationContextRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification",
              "Ticketing"
            ],
            "id": "Enablement_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "PT7H",
            "id": "Expiration_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_enduser_member@test.com"
            ],
            "id": "Notification_Admin_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_enduser_member@test.com"
            ],
            "id": "Notification_Requestor_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": true,
            "notificationLevel": "Critical",
            "notificationRecipients": null,
            "id": "Notification_Approver_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          }
        ],
        "effectiveRules": [
          {
            "enabledRules": [],
            "id": "Enablement_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_eligible@test.com"
            ],
            "id": "Notification_Admin_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_eligible@test.com"
            ],
            "id": "Notification_Requestor_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_eligible@test.com"
            ],
            "id": "Notification_Approver_Admin_Eligibility",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Eligibility",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification"
            ],
            "id": "Enablement_Admin_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": false,
            "maximumDuration": "P90D",
            "id": "Expiration_Admin_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_admin_member@test.com"
            ],
            "id": "Notification_Admin_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_admin_member@test.com"
            ],
            "id": "Notification_Requestor_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "approver_admin_member@test.com"
            ],
            "id": "Notification_Approver_Admin_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "Admin",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "setting": {
              "isApprovalRequired": true,
              "isApprovalRequiredForExtension": false,
              "isRequestorJustificationRequired": true,
              "approvalMode": "SingleStage",
              "approvalStages": [
                {
                  "approvalStageTimeOutInDays": 1,
                  "isApproverJustificationRequired": true,
                  "escalationTimeInMinutes": 0,
                  "primaryApprovers": [
                    {
                      "id": "2385b0f3-5fa9-43cf-8ca4-b01dc97298cd",
                      "description": "amansw_new_group",
                      "isBackup": false,
                      "userType": "Group"
                    },
                    {
                      "id": "2f4913c9-d15b-406a-9946-1d66a28f2690",
                      "description": "amansw_group",
                      "isBackup": false,
                      "userType": "Group"
                    }
                  ],
                  "isEscalationEnabled": false,
                  "escalationApprovers": null
                }
              ]
            },
            "id": "Approval_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyApprovalRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isEnabled": false,
            "claimValue": "",
            "id": "AuthenticationContext_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyAuthenticationContextRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "enabledRules": [
              "MultiFactorAuthentication",
              "Justification",
              "Ticketing"
            ],
            "id": "Enablement_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyEnablementRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "isExpirationRequired": true,
            "maximumDuration": "PT7H",
            "id": "Expiration_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyExpirationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Admin",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "admin_enduser_member@test.com"
            ],
            "id": "Notification_Admin_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Requestor",
            "isDefaultRecipientsEnabled": false,
            "notificationLevel": "Critical",
            "notificationRecipients": [
              "requestor_enduser_member@test.com"
            ],
            "id": "Notification_Requestor_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          },
          {
            "notificationType": "Email",
            "recipientType": "Approver",
            "isDefaultRecipientsEnabled": true,
            "notificationLevel": "Critical",
            "notificationRecipients": null,
            "id": "Notification_Approver_EndUser_Assignment",
            "ruleType": "RoleManagementPolicyNotificationRule",
            "target": {
              "caller": "EndUser",
              "operations": [
                "All"
              ],
              "level": "Assignment",
              "targetObjects": null,
              "inheritableSettings": null,
              "enforcedSettings": null
            }
          }
        ],
        "policyProperties": {
          "scope": {
            "id": "/subscriptions/129ff972-28f8-46b8-a726-e497be039368",
            "displayName": "Pay-As-You-Go",
            "type": "subscription"
          }
        }
      },
      "name": "570c3619-7688-4b34-b290-2b8bb3ccab2a",
      "id": "/subscriptions/129ff972-28f8-46b8-a726-e497be039368/providers/Microsoft.Authorization/roleManagementPolicies/570c3619-7688-4b34-b290-2b8bb3ccab2a",
      "type": "Microsoft.Authorization/RoleManagementPolicies"
    }
  ]
}

Définitions

Nom Description
CloudError

Réponse d’erreur du service.
CloudErrorBody

Réponse d’erreur du service.
PolicyProperties

Informations étendues sur l’étendue des ressources
Principal

Nom de l’entité qui l’a modifiée pour la dernière fois
RoleManagementPolicy

Stratégie de gestion des rôles
RoleManagementPolicyListResult

Résultat de l’opération de liste des stratégies de gestion des rôles.
Scope

Détails de l’étendue de la ressource

CloudError

Réponse d’erreur du service.

Nom Type Description
error

CloudErrorBody

Réponse d’erreur du service.

CloudErrorBody

Réponse d’erreur du service.

Nom Type Description
code

string

Identificateur de l'erreur. Les codes sont invariants et sont destinés à être consommés par programmation.
message

string

Message décrivant l’erreur, destiné à être affiché dans une interface utilisateur.

PolicyProperties

Informations étendues sur l’étendue des ressources

Nom Type Description
scope

Scope

Détails de l’étendue de la ressource

Principal

Nom de l’entité qui l’a modifiée pour la dernière fois

Nom Type Description
displayName

string

Le nom du principal a apporté des modifications
email

string

Email du principal
id

string

ID du principal apporté des modifications
type

string

Type de principal tel que l’utilisateur , le groupe, etc.

RoleManagementPolicy

Stratégie de gestion des rôles

Nom Type Description
id

string

ID de stratégie de gestion des rôles.
name

string

Nom de la stratégie de gestion des rôles.
properties.description

string

Description de la stratégie de gestion des rôles.
properties.displayName

string

Nom complet de la stratégie de gestion des rôles.
properties.effectiveRules

RoleManagementPolicyRule[]

Règle calculée en lecture seule appliquée à la stratégie.
properties.isOrganizationDefault

boolean

La stratégie de gestion des rôles est une stratégie par défaut.
properties.lastModifiedBy

Principal

Nom de l’entité qui l’a modifiée pour la dernière fois
properties.lastModifiedDateTime

string

Date et heure de la dernière modification.
properties.policyProperties

PolicyProperties

Propriétés supplémentaires de l’étendue
properties.rules

RoleManagementPolicyRule[]

Règle appliquée à la stratégie.
properties.scope

string

Étendue de la stratégie de gestion des rôles.
type

string

Type de stratégie de gestion des rôles.

RoleManagementPolicyListResult

Résultat de l’opération de liste des stratégies de gestion des rôles.

Nom Type Description
nextLink

string

URL à utiliser pour obtenir l’ensemble de résultats suivant.
value

RoleManagementPolicy[]

Liste des stratégies de gestion des rôles.

Scope

Détails de l’étendue de la ressource

Nom Type Description
displayName

string

Nom d’affichage de la ressource
id

string

ID d’étendue de la ressource
type

string

Type de la ressource