Sql
data class SqlResourceSqlRoleDefinitionArgs(val accountName: Output<String>? = null, val assignableScopes: Output<List<String>>? = null, val permissions: Output<List<PermissionArgs>>? = null, val resourceGroupName: Output<String>? = null, val roleDefinitionId: Output<String>? = null, val roleName: Output<String>? = null, val type: Output<RoleDefinitionType>? = null) : ConvertibleToJava<SqlResourceSqlRoleDefinitionArgs>
An Azure Cosmos DB SQL Role Definition. Uses Azure REST API version 2023-04-15. In version 1.x of the Azure Native provider, it used API version 2021-03-01-preview. Other available API versions: 2023-09-15, 2023-09-15-preview, 2023-11-15, 2023-11-15-preview, 2024-02-15-preview, 2024-05-15, 2024-05-15-preview, 2024-08-15, 2024-09-01-preview, 2024-11-15, 2024-12-01-preview.
Example Usage
CosmosDBSqlRoleDefinitionCreateUpdate
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var sqlResourceSqlRoleDefinition = new AzureNative.DocumentDB.SqlResourceSqlRoleDefinition("sqlResourceSqlRoleDefinition", new()
{
AccountName = "myAccountName",
AssignableScopes = new[]
{
"/subscriptions/mySubscriptionId/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales",
"/subscriptions/mySubscriptionId/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases",
},
Permissions = new[]
{
new AzureNative.DocumentDB.Inputs.PermissionArgs
{
DataActions = new[]
{
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/create",
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/read",
},
NotDataActions = new() { },
},
},
ResourceGroupName = "myResourceGroupName",
RoleDefinitionId = "myRoleDefinitionId",
RoleName = "myRoleName",
Type = AzureNative.DocumentDB.RoleDefinitionType.CustomRole,
});
});Content copied to clipboard
package main
import (
documentdb "github.com/pulumi/pulumi-azure-native-sdk/documentdb/v2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := documentdb.NewSqlResourceSqlRoleDefinition(ctx, "sqlResourceSqlRoleDefinition", &documentdb.SqlResourceSqlRoleDefinitionArgs{
AccountName: pulumi.String("myAccountName"),
AssignableScopes: pulumi.StringArray{
pulumi.String("/subscriptions/mySubscriptionId/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales"),
pulumi.String("/subscriptions/mySubscriptionId/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases"),
},
Permissions: documentdb.PermissionArray{
&documentdb.PermissionArgs{
DataActions: pulumi.StringArray{
pulumi.String("Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/create"),
pulumi.String("Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/read"),
},
NotDataActions: pulumi.StringArray{},
},
},
ResourceGroupName: pulumi.String("myResourceGroupName"),
RoleDefinitionId: pulumi.String("myRoleDefinitionId"),
RoleName: pulumi.String("myRoleName"),
Type: documentdb.RoleDefinitionTypeCustomRole,
})
if err != nil {
return err
}
return nil
})
}Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.documentdb.SqlResourceSqlRoleDefinition;
import com.pulumi.azurenative.documentdb.SqlResourceSqlRoleDefinitionArgs;
import com.pulumi.azurenative.documentdb.inputs.PermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var sqlResourceSqlRoleDefinition = new SqlResourceSqlRoleDefinition("sqlResourceSqlRoleDefinition", SqlResourceSqlRoleDefinitionArgs.builder()
.accountName("myAccountName")
.assignableScopes(
"/subscriptions/mySubscriptionId/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales",
"/subscriptions/mySubscriptionId/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases")
.permissions(PermissionArgs.builder()
.dataActions(
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/create",
"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/items/read")
.notDataActions()
.build())
.resourceGroupName("myResourceGroupName")
.roleDefinitionId("myRoleDefinitionId")
.roleName("myRoleName")
.type("CustomRole")
.build());
}
}Content copied to clipboard
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:documentdb:SqlResourceSqlRoleDefinition myRoleDefinitionId /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.DocumentDB/databaseAccounts/{accountName}/sqlRoleDefinitions/{roleDefinitionId}Content copied to clipboard
Constructors
Link copied to clipboard
constructor(accountName: Output<String>? = null, assignableScopes: Output<List<String>>? = null, permissions: Output<List<PermissionArgs>>? = null, resourceGroupName: Output<String>? = null, roleDefinitionId: Output<String>? = null, roleName: Output<String>? = null, type: Output<RoleDefinitionType>? = null)
Properties
Link copied to clipboard
Cosmos DB database account name.
Link copied to clipboard
A set of fully qualified Scopes at or below which Role Assignments may be created using this Role Definition. This will allow application of this Role Definition on the entire database account or any underlying Database / Collection. Must have at least one element. Scopes higher than Database account are not enforceable as assignable Scopes. Note that resources referenced in assignable Scopes need not exist.
Link copied to clipboard
The set of operations allowed through this Role Definition.
Link copied to clipboard
The name of the resource group. The name is case insensitive.
Link copied to clipboard
The GUID for the Role Definition.
Link copied to clipboard
Indicates whether the Role Definition was built-in or user created.