DenySettings Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Defines how resources deployed by the Deployment stack are locked.
public class DenySettingstype DenySettings = classPublic Class DenySettings- Inheritance
-
DenySettings
Constructors
| DenySettings() |
Initializes a new instance of the DenySettings class. |
| DenySettings(String, IList<String>, IList<String>, Nullable<Boolean>) |
Initializes a new instance of the DenySettings class. |
Properties
| ApplyToChildScopes |
Gets or sets denySettings will be applied to child resource scopes of every managed resource with a deny assignment. |
| ExcludedActions |
Gets or sets list of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed. |
| ExcludedPrincipals |
Gets or sets list of AAD principal IDs excluded from the lock. Up to 5 principals are permitted. |
| Mode |
Gets or sets denySettings Mode that defines denied actions. Possible values include: 'denyDelete', 'denyWriteAndDelete', 'none' |
Methods
| Validate() |
Validate the object. |