Role Eligibility Schedule Requests - Get
Get the specified role eligibility schedule request.
GET https://management.azure.com/{scope}/providers/Microsoft.Authorization/roleEligibilityScheduleRequests/{roleEligibilityScheduleRequestName}?api-version=2020-10-01
URI Parameters
| Name | In | Required | Type | Description |
|---|---|---|---|---|
|
role
|
path | True |
string |
The name (guid) of the role eligibility schedule request to get. |
|
scope
|
path | True |
string |
The scope of the role eligibility schedule request. |
|
api-version
|
query | True |
string minLength: 1 |
The API version to use for this operation. |
Responses
| Name | Type | Description |
|---|---|---|
| 200 OK |
OK - Returns information about the role eligibility schedule request. |
|
| Other Status Codes |
Error response describing why the operation failed. |
Security
azure_auth
Azure Active Directory OAuth2 Flow
Type:
oauth2
Flow:
implicit
Authorization URL:
https://login.microsoftonline.com/common/oauth2/authorize
Scopes
| Name | Description |
|---|---|
| user_impersonation | impersonate your user account |
Examples
GetRoleEligibilityScheduleRequestByName
Sample request
GET https://management.azure.com/providers/Microsoft.Subscription/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleEligibilityScheduleRequests/64caffb6-55c0-4deb-a585-68e948ea1ad6?api-version=2020-10-01
Sample response
{
"properties": {
"targetRoleEligibilityScheduleId": "b1477448-2cc6-4ceb-93b4-54a202a89413",
"targetRoleEligibilityScheduleInstanceId": null,
"scope": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f",
"roleDefinitionId": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608",
"principalId": "a3bb8764-cb92-4276-9d2a-ca1e895e55ea",
"principalType": "User",
"requestType": "AdminAssign",
"status": "Provisioned",
"approvalId": null,
"scheduleInfo": {
"startDateTime": "2020-09-09T21:31:27.91Z",
"expiration": {
"type": "AfterDuration",
"endDateTime": null,
"duration": "P365D"
}
},
"ticketInfo": {
"ticketNumber": null,
"ticketSystem": null
},
"justification": null,
"requestorId": "a3bb8764-cb92-4276-9d2a-ca1e895e55ea",
"createdOn": "2020-09-09T21:32:27.91Z",
"condition": "@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'",
"conditionVersion": "1.0",
"expandedProperties": {
"scope": {
"id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f",
"displayName": "Pay-As-You-Go",
"type": "subscription"
},
"roleDefinition": {
"id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608",
"displayName": "Contributor",
"type": "BuiltInRole"
},
"principal": {
"id": "a3bb8764-cb92-4276-9d2a-ca1e895e55ea",
"displayName": "User Account",
"email": "user@my-tenant.com",
"type": "User"
}
}
},
"name": "64caffb6-55c0-4deb-a585-68e948ea1ad6",
"id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/RoleEligibilityRequests/64caffb6-55c0-4deb-a585-68e948ea1ad6",
"type": "Microsoft.Authorization/RoleEligibilityRequests"
}
Definitions
| Name | Description |
|---|---|
|
Cloud |
An error response from the service. |
|
Cloud |
An error response from the service. |
|
Expanded |
Expanded info of resource, role and principal |
| Expiration |
Expiration of the role eligibility schedule |
| Principal |
Details of the principal |
|
principal |
The principal type of the assigned principal ID. |
|
Request |
The type of the role assignment schedule request. Eg: SelfActivate, AdminAssign etc |
|
Role |
Details of role definition |
|
Role |
Role Eligibility schedule request |
|
Schedule |
Schedule info of the role eligibility schedule |
| Scope |
Details of the resource scope |
| Status |
The status of the role eligibility schedule request. |
|
Ticket |
Ticket Info of the role eligibility |
| Type |
Type of the role eligibility schedule expiration |
CloudError
An error response from the service.
| Name | Type | Description |
|---|---|---|
| error |
An error response from the service. |
CloudErrorBody
An error response from the service.
| Name | Type | Description |
|---|---|---|
| code |
string |
An identifier for the error. Codes are invariant and are intended to be consumed programmatically. |
| message |
string |
A message describing the error, intended to be suitable for display in a user interface. |
ExpandedProperties
Expanded info of resource, role and principal
| Name | Type | Description |
|---|---|---|
| principal |
Details of the principal |
|
| roleDefinition |
Details of role definition |
|
| scope |
Details of the resource scope |
Expiration
Expiration of the role eligibility schedule
| Name | Type | Description |
|---|---|---|
| duration |
string |
Duration of the role eligibility schedule in TimeSpan. |
| endDateTime |
string (date-time) |
End DateTime of the role eligibility schedule. |
| type |
Type of the role eligibility schedule expiration |
Principal
Details of the principal
| Name | Type | Description |
|---|---|---|
| displayName |
string |
Display name of the principal |
|
string |
Email id of the principal |
|
| id |
string |
Id of the principal |
| type |
string |
Type of the principal |
principalType
The principal type of the assigned principal ID.
| Value | Description |
|---|---|
| User | |
| Group | |
| ServicePrincipal | |
| ForeignGroup | |
| Device |
RequestType
The type of the role assignment schedule request. Eg: SelfActivate, AdminAssign etc
| Value | Description |
|---|---|
| AdminAssign | |
| AdminRemove | |
| AdminUpdate | |
| AdminExtend | |
| AdminRenew | |
| SelfActivate | |
| SelfDeactivate | |
| SelfExtend | |
| SelfRenew |
RoleDefinition
Details of role definition
| Name | Type | Description |
|---|---|---|
| displayName |
string |
Display name of the role definition |
| id |
string |
Id of the role definition |
| type |
string |
Type of the role definition |
RoleEligibilityScheduleRequest
Role Eligibility schedule request
| Name | Type | Description |
|---|---|---|
| id |
string |
The role eligibility schedule request ID. |
| name |
string |
The role eligibility schedule request name. |
| properties.approvalId |
string |
The approvalId of the role eligibility schedule request. |
| properties.condition |
string |
The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container' |
| properties.conditionVersion |
string |
Version of the condition. Currently accepted value is '2.0' |
| properties.createdOn |
string (date-time) |
DateTime when role eligibility schedule request was created |
| properties.expandedProperties |
Additional properties of principal, scope and role definition |
|
| properties.justification |
string |
Justification for the role eligibility |
| properties.principalId |
string |
The principal ID. |
| properties.principalType |
The principal type of the assigned principal ID. |
|
| properties.requestType |
The type of the role assignment schedule request. Eg: SelfActivate, AdminAssign etc |
|
| properties.requestorId |
string |
Id of the user who created this request |
| properties.roleDefinitionId |
string |
The role definition ID. |
| properties.scheduleInfo |
Schedule info of the role eligibility schedule |
|
| properties.scope |
string |
The role eligibility schedule request scope. |
| properties.status |
The status of the role eligibility schedule request. |
|
| properties.targetRoleEligibilityScheduleId |
string |
The resultant role eligibility schedule id or the role eligibility schedule id being updated |
| properties.targetRoleEligibilityScheduleInstanceId |
string |
The role eligibility schedule instance id being updated |
| properties.ticketInfo |
Ticket Info of the role eligibility |
|
| type |
string |
The role eligibility schedule request type. |
ScheduleInfo
Schedule info of the role eligibility schedule
| Name | Type | Description |
|---|---|---|
| expiration |
Expiration of the role eligibility schedule |
|
| startDateTime |
string (date-time) |
Start DateTime of the role eligibility schedule. |
Scope
Details of the resource scope
| Name | Type | Description |
|---|---|---|
| displayName |
string |
Display name of the resource |
| id |
string |
Scope id of the resource |
| type |
string |
Type of the resource |
Status
The status of the role eligibility schedule request.
| Value | Description |
|---|---|
| Accepted | |
| PendingEvaluation | |
| Granted | |
| Denied | |
| PendingProvisioning | |
| Provisioned | |
| PendingRevocation | |
| Revoked | |
| Canceled | |
| Failed | |
| PendingApprovalProvisioning | |
| PendingApproval | |
| FailedAsResourceIsLocked | |
| PendingAdminDecision | |
| AdminApproved | |
| AdminDenied | |
| TimedOut | |
| ProvisioningStarted | |
| Invalid | |
| PendingScheduleCreation | |
| ScheduleCreated | |
| PendingExternalProvisioning |
TicketInfo
Ticket Info of the role eligibility
| Name | Type | Description |
|---|---|---|
| ticketNumber |
string |
Ticket number for the role eligibility |
| ticketSystem |
string |
Ticket system name for the role eligibility |
Type
Type of the role eligibility schedule expiration
| Value | Description |
|---|---|
| AfterDuration | |
| AfterDateTime | |
| NoExpiration |