2020-10-01 GA release of PIM specs (Azure#18459)

* Initial commit: copy 2020-10-01-preview to stable * Remove -preview tag from 2020-10-01 * Update readme.md * [New Change] Add /validate to request models * [New] Add effectiveRules in policyAsignment model * remove /providers/Microsoft.Subscription in exampl * Misc fixes * Refactory common model for rules * Grammar fixes * config readme.python * update Co-authored-by: Jiefeng Chen (WICRESOFT NORTH AMERICA LTD) <[email protected]>
grucloud · May 16, 2022 · 1610bc6 · 1610bc6
1 parent 6fd3572
commit 1610bc6
Show file tree

Hide file tree

Showing 40 changed files with 9,917 additions and 0 deletions.
diff --git a/...on/resource-manager/Microsoft.Authorization/stable/2020-10-01/EligibleChildResources.json b/...on/resource-manager/Microsoft.Authorization/stable/2020-10-01/EligibleChildResources.json
@@ -0,0 +1,154 @@
+{
+  "swagger": "2.0",
+  "info": {
+    "title": "AuthorizationManagementClient",
+    "version": "2020-10-01",
+    "description": "Role based access control provides you a way to apply granular level policy administration down to individual resources or resource groups. These operations enable you to manage role assignments. A role assignment grants access to Azure Active Directory users."
+  },
+  "host": "management.azure.com",
+  "schemes": [
+    "https"
+  ],
+  "consumes": [
+    "application/json"
+  ],
+  "produces": [
+    "application/json"
+  ],
+  "security": [
+    {
+      "azure_auth": [
+        "user_impersonation"
+      ]
+    }
+  ],
+  "securityDefinitions": {
+    "azure_auth": {
+      "type": "oauth2",
+      "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
+      "flow": "implicit",
+      "description": "Azure Active Directory OAuth2 Flow",
+      "scopes": {
+        "user_impersonation": "impersonate your user account"
+      }
+    }
+  },
+  "paths": {
+    "/{scope}/providers/Microsoft.Authorization/eligibleChildResources": {
+      "get": {
+        "tags": [
+          "eligibleChildResources"
+        ],
+        "operationId": "EligibleChildResources_Get",
+        "description": "Get the child resources of a resource on which user has eligible access",
+        "parameters": [
+          {
+            "name": "scope",
+            "in": "path",
+            "required": true,
+            "type": "string",
+            "description": "The scope of the role management policy.",
+            "x-ms-skip-url-encoding": true
+          },
+          {
+            "name": "$filter",
+            "in": "query",
+            "required": false,
+            "type": "string",
+            "description": "The filter to apply on the operation. Use $filter=resourceType+eq+'Subscription' to filter on only resource of type = 'Subscription'. Use $filter=resourceType+eq+'subscription'+or+resourceType+eq+'resourcegroup' to filter on resource of type = 'Subscription' or 'ResourceGroup'"
+          },
+          {
+            "$ref": "../../../../../common-types/resource-management/v2/types.json#/parameters/ApiVersionParameter"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "OK - Returns information about the role management policy.",
+            "schema": {
+              "$ref": "#/definitions/EligibleChildResourcesListResult"
+            }
+          },
+          "default": {
+            "description": "Error response describing why the operation failed.",
+            "schema": {
+              "$ref": "#/definitions/CloudError"
+            }
+          }
+        },
+        "x-ms-pageable": {
+          "nextLinkName": "nextLink"
+        },
+        "x-ms-examples": {
+          "GetEligibleChildResourcesByScope": {
+            "$ref": "./examples/GetEligibleChildResourcesByScope.json"
+          }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "EligibleChildResourcesListResult": {
+      "properties": {
+        "value": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/EligibleChildResource"
+          },
+          "description": "Eligible child resource list."
+        },
+        "nextLink": {
+          "type": "string",
+          "description": "The URL to use for getting the next set of results."
+        }
+      },
+      "type": "object",
+      "description": "Eligible child resources list operation result."
+    },
+    "EligibleChildResource": {
+      "properties": {
+        "id": {
+          "type": "string",
+          "readOnly": true,
+          "description": "The resource scope Id."
+        },
+        "name": {
+          "type": "string",
+          "readOnly": true,
+          "description": "The resource name."
+        },
+        "type": {
+          "type": "string",
+          "readOnly": true,
+          "description": "The resource type."
+        }
+      },
+      "type": "object",
+      "description": "Eligible child resource"
+    },
+    "CloudError": {
+      "x-ms-external": true,
+      "properties": {
+        "error": {
+          "$ref": "#/definitions/CloudErrorBody"
+        }
+      },
+      "type": "object",
+      "description": "An error response from the service."
+    },
+    "CloudErrorBody": {
+      "x-ms-external": true,
+      "properties": {
+        "code": {
+          "type": "string",
+          "description": "An identifier for the error. Codes are invariant and are intended to be consumed programmatically."
+        },
+        "message": {
+          "type": "string",
+          "description": "A message describing the error, intended to be suitable for display in a user interface."
+        }
+      },
+      "type": "object",
+      "description": "An error response from the service."
+    }
+  }
+}