DenyAssignment Class
Deny Assignment.
Variables are only populated by the server, and will be ignored when sending a request.
Constructor
DenyAssignment(*, deny_assignment_name: str | None = None, description: str | None = None, permissions: List[_models.DenyAssignmentPermission] | None = None, scope: str | None = None, do_not_apply_to_child_scopes: bool | None = None, principals: List[_models.Principal] | None = None, exclude_principals: List[_models.Principal] | None = None, is_system_protected: bool | None = None, condition: str | None = None, condition_version: str | None = None, **kwargs: Any)
Keyword-Only Parameters
| Name | Description |
|---|---|
|
deny_assignment_name
|
The display name of the deny assignment. Default value: None
|
|
description
|
The description of the deny assignment. Default value: None
|
|
permissions
|
An array of permissions that are denied by the deny assignment. Default value: None
|
|
scope
|
The deny assignment scope. Default value: None
|
|
do_not_apply_to_child_scopes
|
Determines if the deny assignment applies to child scopes. Default value is false. Default value: None
|
|
principals
|
Array of principals to which the deny assignment applies. Default value: None
|
|
exclude_principals
|
Array of principals to which the deny assignment does not apply. Default value: None
|
|
is_system_protected
|
Specifies whether this deny assignment was created by Azure and cannot be edited or deleted. Default value: None
|
|
condition
|
The conditions on the deny assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'. Default value: None
|
|
condition_version
|
Version of the condition. Default value: None
|
Variables
| Name | Description |
|---|---|
|
id
|
The deny assignment ID. |
|
name
|
The deny assignment name. |
|
type
|
The deny assignment type. |
|
deny_assignment_name
|
The display name of the deny assignment. |
|
description
|
The description of the deny assignment. |
|
permissions
|
An array of permissions that are denied by the deny assignment. |
|
scope
|
The deny assignment scope. |
|
do_not_apply_to_child_scopes
|
Determines if the deny assignment applies to child scopes. Default value is false. |
|
principals
|
Array of principals to which the deny assignment applies. |
|
exclude_principals
|
Array of principals to which the deny assignment does not apply. |
|
is_system_protected
|
Specifies whether this deny assignment was created by Azure and cannot be edited or deleted. |
|
condition
|
The conditions on the deny assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'. |
|
condition_version
|
Version of the condition. |
|
created_on
|
Time it was created. |
|
updated_on
|
Time it was updated. |
|
created_by
|
Id of the user who created the assignment. |
|
updated_by
|
Id of the user who updated the assignment. |