Share via


DenySettings Class

Definition

Defines how resources deployed by the Deployment stack are locked.

public class DenySettings
type DenySettings = class
Public Class DenySettings
Inheritance
DenySettings

Constructors

DenySettings()

Initializes a new instance of the DenySettings class.

DenySettings(String, IList<String>, IList<String>, Nullable<Boolean>)

Initializes a new instance of the DenySettings class.

Properties

ApplyToChildScopes

Gets or sets denySettings will be applied to child resource scopes of every managed resource with a deny assignment.

ExcludedActions

Gets or sets list of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.

ExcludedPrincipals

Gets or sets list of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.

Mode

Gets or sets denySettings Mode that defines denied actions. Possible values include: 'denyDelete', 'denyWriteAndDelete', 'none'

Methods

Validate()

Validate the object.

Applies to