DenyAssignment Class

Deny Assignment.

Variables are only populated by the server, and will be ignored when sending a request.

Inheritance

azure.mgmt.authorization._serialization.Model

DenyAssignment

Constructor

DenyAssignment(*, deny_assignment_name: str | None = None, description: str | None = None, permissions: List[_models.DenyAssignmentPermission] | None = None, scope: str | None = None, do_not_apply_to_child_scopes: bool | None = None, principals: List[_models.Principal] | None = None, exclude_principals: List[_models.Principal] | None = None, is_system_protected: bool | None = None, condition: str | None = None, condition_version: str | None = None, **kwargs: Any)

Keyword-Only Parameters

Name	Description
deny_assignment_name	str The display name of the deny assignment.
description	str The description of the deny assignment.
permissions	list[DenyAssignmentPermission] An array of permissions that are denied by the deny assignment.
scope	str The deny assignment scope.
do_not_apply_to_child_scopes	bool Determines if the deny assignment applies to child scopes. Default value is false.
principals	list[Principal] Array of principals to which the deny assignment applies.
exclude_principals	list[Principal] Array of principals to which the deny assignment does not apply.
is_system_protected	bool Specifies whether this deny assignment was created by Azure and cannot be edited or deleted.
condition	str The conditions on the deny assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'.
condition_version	str Version of the condition.

Variables

Name	Description
id	str The deny assignment ID.
name	str The deny assignment name.
type	str The deny assignment type.
deny_assignment_name	str The display name of the deny assignment.
description	str The description of the deny assignment.
permissions	list[DenyAssignmentPermission] An array of permissions that are denied by the deny assignment.
scope	str The deny assignment scope.
do_not_apply_to_child_scopes	bool Determines if the deny assignment applies to child scopes. Default value is false.
principals	list[Principal] Array of principals to which the deny assignment applies.
exclude_principals	list[Principal] Array of principals to which the deny assignment does not apply.
is_system_protected	bool Specifies whether this deny assignment was created by Azure and cannot be edited or deleted.
condition	str The conditions on the deny assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'.
condition_version	str Version of the condition.
created_on	datetime Time it was created.
updated_on	datetime Time it was updated.
created_by	str Id of the user who created the assignment.
updated_by	str Id of the user who updated the assignment.