Scope
Access Review Schedule Definition. Uses Azure REST API version 2021-12-01-preview. In version 1.x of the Azure Native provider, it used API version 2021-12-01-preview.
Example Usage
PutAccessReview
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var scopeAccessReviewScheduleDefinitionById = new AzureNative.Authorization.ScopeAccessReviewScheduleDefinitionById("scopeAccessReviewScheduleDefinitionById", new()
{
ScheduleDefinitionId = "fa73e90b-5bf1-45fd-a182-35ce5fc0674d",
Scope = "subscriptions/fa73e90b-5bf1-45fd-a182-35ce5fc0674d",
});
});package main
import (
authorization "github.com/pulumi/pulumi-azure-native-sdk/authorization/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := authorization.NewScopeAccessReviewScheduleDefinitionById(ctx, "scopeAccessReviewScheduleDefinitionById", &authorization.ScopeAccessReviewScheduleDefinitionByIdArgs{
ScheduleDefinitionId: pulumi.String("fa73e90b-5bf1-45fd-a182-35ce5fc0674d"),
Scope: pulumi.String("subscriptions/fa73e90b-5bf1-45fd-a182-35ce5fc0674d"),
})
if err != nil {
return err
}
return nil
})
}package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.authorization.ScopeAccessReviewScheduleDefinitionById;
import com.pulumi.azurenative.authorization.ScopeAccessReviewScheduleDefinitionByIdArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var scopeAccessReviewScheduleDefinitionById = new ScopeAccessReviewScheduleDefinitionById("scopeAccessReviewScheduleDefinitionById", ScopeAccessReviewScheduleDefinitionByIdArgs.builder()
.scheduleDefinitionId("fa73e90b-5bf1-45fd-a182-35ce5fc0674d")
.scope("subscriptions/fa73e90b-5bf1-45fd-a182-35ce5fc0674d")
.build());
}
}Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:authorization:ScopeAccessReviewScheduleDefinitionById fa73e90b-5bf1-45fd-a182-35ce5fc0674d /{scope}/providers/Microsoft.Authorization/accessReviewScheduleDefinitions/{scheduleDefinitionId}Properties
The role assignment state eligible/active to review
Flag to indicate whether auto-apply capability, to automatically change the target object access resource, is enabled. If not enabled, a user must, after the review completes, apply the access review.
This is the collection of backup reviewers.
This specifies the behavior for the autoReview feature when an access review completes.
Flag to indicate whether reviewers are required to provide a justification when reviewing access.
The description provided by the access review creator and visible to admins.
The description provided by the access review creator to be shown to reviewers.
The display name for the schedule definition.
This is used to indicate the resource id(s) to exclude
This is used to indicate the role definition id(s) to exclude
Flag to indicate whether to expand nested memberships or not.
Duration users are inactive for. The value should be in ISO 8601 format (http://en.wikipedia.org/wiki/ISO_8601#Durations).This code can be used to convert TimeSpan to a valid interval string: XmlConvert.ToString(new TimeSpan(hours, minutes, seconds))
Flag to indicate whether to expand nested memberships or not.
Flag to indicate whether to expand nested memberships or not.
The duration in days for an instance.
This is the collection of instances returned when one does an expand on it.
Flag to indicate whether the reviewer is required to pass justification when recording a decision.
Flag to indicate whether sending mails to reviewers and the review creator is enabled.
The number of times to repeat the access review. Required and must be positive if type is numbered.
The identity id
The identity display name
The identity type user/servicePrincipal to review
Recommendations for access reviews are calculated by looking back at 30 days of data(w.r.t the start date of the review) by default. However, in some scenarios, customers want to change how far back to look at and want to configure 60 days, 90 days, etc. instead. This setting allows customers to configure this duration. The value should be in ISO 8601 format (http://en.wikipedia.org/wiki/ISO_8601#Durations).This code can be used to convert TimeSpan to a valid interval string: XmlConvert.ToString(new TimeSpan(hours, minutes, seconds))
Flag to indicate whether showing recommendations to reviewers is enabled.
Flag to indicate whether sending reminder emails to reviewers are enabled.
ResourceId in which this review is getting created
This is the collection of reviewers.
This field specifies the type of reviewers for a review. Usually for a review, reviewers are explicitly assigned. However, in some cases, the reviewers may not be assigned and instead be chosen dynamically. For example managers review or self review.
This is used to indicate the role being reviewed
The user principal name(if valid)