Cassandra Resource Cassandra Role Definition
Parameters to create and update an Azure Cosmos DB Cassandra Role Definition. Uses Azure REST API version 2025-05-01-preview.
Example Usage
CosmosDBCassandraRoleDefinitionCreateUpdate
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
var cassandraResourceCassandraRoleDefinition = new AzureNative.CosmosDB.CassandraResourceCassandraRoleDefinition("cassandraResourceCassandraRoleDefinition", new()
{
AccountName = "myAccountName",
AssignableScopes = new[]
{
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales",
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases",
},
Permissions = new[]
{
new AzureNative.CosmosDB.Inputs.PermissionArgs
{
DataActions = new[]
{
"Microsoft.DocumentDB/databaseAccounts/cassandraDatabases/containers/entities/create",
"Microsoft.DocumentDB/databaseAccounts/cassandraDatabases/containers/entities/read",
},
NotDataActions = new() { },
},
},
ResourceGroupName = "myResourceGroupName",
RoleDefinitionId = "myRoleDefinitionId",
RoleName = "myRoleName",
Type = AzureNative.CosmosDB.RoleDefinitionType.CustomRole,
});
});
package main
import (
cosmosdb "github.com/pulumi/pulumi-azure-native-sdk/cosmosdb/v3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cosmosdb.NewCassandraResourceCassandraRoleDefinition(ctx, "cassandraResourceCassandraRoleDefinition", &cosmosdb.CassandraResourceCassandraRoleDefinitionArgs{
AccountName: pulumi.String("myAccountName"),
AssignableScopes: pulumi.StringArray{
pulumi.String("/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales"),
pulumi.String("/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases"),
},
Permissions: cosmosdb.PermissionArray{
&cosmosdb.PermissionArgs{
DataActions: pulumi.StringArray{
pulumi.String("Microsoft.DocumentDB/databaseAccounts/cassandraDatabases/containers/entities/create"),
pulumi.String("Microsoft.DocumentDB/databaseAccounts/cassandraDatabases/containers/entities/read"),
},
NotDataActions: pulumi.StringArray{},
},
},
ResourceGroupName: pulumi.String("myResourceGroupName"),
RoleDefinitionId: pulumi.String("myRoleDefinitionId"),
RoleName: pulumi.String("myRoleName"),
Type: cosmosdb.RoleDefinitionTypeCustomRole,
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.cosmosdb.CassandraResourceCassandraRoleDefinition;
import com.pulumi.azurenative.cosmosdb.CassandraResourceCassandraRoleDefinitionArgs;
import com.pulumi.azurenative.cosmosdb.inputs.PermissionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var cassandraResourceCassandraRoleDefinition = new CassandraResourceCassandraRoleDefinition("cassandraResourceCassandraRoleDefinition", CassandraResourceCassandraRoleDefinitionArgs.builder()
.accountName("myAccountName")
.assignableScopes(
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/sales",
"/subscriptions/ffffffff-ffff-ffff-ffff-ffffffffffff/resourceGroups/myResourceGroupName/providers/Microsoft.DocumentDB/databaseAccounts/myAccountName/dbs/purchases")
.permissions(PermissionArgs.builder()
.dataActions(
"Microsoft.DocumentDB/databaseAccounts/cassandraDatabases/containers/entities/create",
"Microsoft.DocumentDB/databaseAccounts/cassandraDatabases/containers/entities/read")
.notDataActions()
.build())
.resourceGroupName("myResourceGroupName")
.roleDefinitionId("myRoleDefinitionId")
.roleName("myRoleName")
.type("CustomRole")
.build());
}
}
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:cosmosdb:CassandraResourceCassandraRoleDefinition myRoleDefinitionId /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.DocumentDB/databaseAccounts/{accountName}/cassandraRoleDefinitions/{roleDefinitionId}
Properties
A set of fully qualified Scopes at or below which Cassandra Role Assignments may be created using this Role Definition. This will allow application of this Role Definition on the entire database account or any underlying Database / Collection. Must have at least one element. Scopes higher than Database account are not enforceable as assignable Scopes. Note that resources referenced in assignable Scopes need not exist.
The Azure API version of the resource.
The set of operations allowed through this Role Definition.
Azure Resource Manager metadata containing createdBy and modifiedBy information.