Role Eligibility Schedules - Get
Get the specified role eligibility schedule for a resource scope
GET https://management.azure.com/{scope}/providers/Microsoft.Authorization/roleEligibilitySchedules/{roleEligibilityScheduleName}?api-version=2020-10-01
URI Parameters
Name | In | Required | Type | Description |
---|---|---|---|---|
role
|
path | True |
string |
The name (guid) of the role eligibility schedule to get. |
scope
|
path | True |
string |
The scope of the role eligibility schedule. |
api-version
|
query | True |
string |
The API version to use for this operation. |
Responses
Name | Type | Description |
---|---|---|
200 OK |
OK - Returns information about the role eligibility schedule. |
|
Other Status Codes |
Error response describing why the operation failed. |
Security
azure_auth
Azure Active Directory OAuth2 Flow
Type:
oauth2
Flow:
implicit
Authorization URL:
https://login.microsoftonline.com/common/oauth2/authorize
Scopes
Name | Description |
---|---|
user_impersonation | impersonate your user account |
Examples
GetRoleEligibilityScheduleByName
Sample request
GET https://management.azure.com/providers/Microsoft.Subscription/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleEligibilitySchedules/b1477448-2cc6-4ceb-93b4-54a202a89413?api-version=2020-10-01
Sample response
{
"properties": {
"scope": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f",
"roleDefinitionId": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c",
"principalId": "a3bb8764-cb92-4276-9d2a-ca1e895e55ea",
"principalType": "User",
"status": "Provisioned",
"roleEligibilityScheduleRequestId": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/RoleEligibilityScheduleRequests/64caffb6-55c0-4deb-a585-68e948ea1ad6",
"startDateTime": "2020-09-09T21:33:14.557Z",
"endDateTime": "2021-09-09T21:32:28.49Z",
"memberType": "Direct",
"createdOn": "2020-09-09T21:33:06.3Z",
"updatedOn": "2020-09-09T22:27:00.513Z",
"condition": "@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'",
"conditionVersion": "1.0",
"expandedProperties": {
"scope": {
"id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f",
"displayName": "Pay-As-You-Go",
"type": "subscription"
},
"roleDefinition": {
"id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608",
"displayName": "Contributor",
"type": "BuiltInRole"
},
"principal": {
"id": "a3bb8764-cb92-4276-9d2a-ca1e895e55ea",
"displayName": "User Account",
"email": "user@my-tenant.com",
"type": "User"
}
}
},
"name": "b1477448-2cc6-4ceb-93b4-54a202a89413",
"id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/RoleEligibilitySchedules/b1477448-2cc6-4ceb-93b4-54a202a89413",
"type": "Microsoft.Authorization/RoleEligibilitySchedules"
}
Definitions
Name | Description |
---|---|
Cloud |
An error response from the service. |
Cloud |
An error response from the service. |
Expanded |
|
Member |
Membership type of the role eligibility schedule |
Principal |
Details of the principal |
principal |
The principal type of the assigned principal ID. |
Role |
Details of role definition |
Role |
Role eligibility schedule |
Scope |
Details of the resource scope |
Status |
The status of the role eligibility schedule. |
CloudError
An error response from the service.
Name | Type | Description |
---|---|---|
error |
An error response from the service. |
CloudErrorBody
An error response from the service.
Name | Type | Description |
---|---|---|
code |
string |
An identifier for the error. Codes are invariant and are intended to be consumed programmatically. |
message |
string |
A message describing the error, intended to be suitable for display in a user interface. |
ExpandedProperties
Name | Type | Description |
---|---|---|
principal |
Details of the principal |
|
roleDefinition |
Details of role definition |
|
scope |
Details of the resource scope |
MemberType
Membership type of the role eligibility schedule
Name | Type | Description |
---|---|---|
Direct |
string |
|
Group |
string |
|
Inherited |
string |
Principal
Details of the principal
Name | Type | Description |
---|---|---|
displayName |
string |
Display name of the principal |
string |
Email id of the principal |
|
id |
string |
Id of the principal |
type |
string |
Type of the principal |
principalType
The principal type of the assigned principal ID.
Name | Type | Description |
---|---|---|
Device |
string |
|
ForeignGroup |
string |
|
Group |
string |
|
ServicePrincipal |
string |
|
User |
string |
RoleDefinition
Details of role definition
Name | Type | Description |
---|---|---|
displayName |
string |
Display name of the role definition |
id |
string |
Id of the role definition |
type |
string |
Type of the role definition |
RoleEligibilitySchedule
Role eligibility schedule
Name | Type | Description |
---|---|---|
id |
string |
The role eligibility schedule Id. |
name |
string |
The role eligibility schedule name. |
properties.condition |
string |
The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container' |
properties.conditionVersion |
string |
Version of the condition. Currently accepted value is '2.0' |
properties.createdOn |
string |
DateTime when role eligibility schedule was created |
properties.endDateTime |
string |
End DateTime when role eligibility schedule |
properties.expandedProperties |
Additional properties of principal, scope and role definition |
|
properties.memberType |
Membership type of the role eligibility schedule |
|
properties.principalId |
string |
The principal ID. |
properties.principalType |
The principal type of the assigned principal ID. |
|
properties.roleDefinitionId |
string |
The role definition ID. |
properties.roleEligibilityScheduleRequestId |
string |
The id of roleEligibilityScheduleRequest used to create this roleAssignmentSchedule |
properties.scope |
string |
The role eligibility schedule scope. |
properties.startDateTime |
string |
Start DateTime when role eligibility schedule |
properties.status |
The status of the role eligibility schedule. |
|
properties.updatedOn |
string |
DateTime when role eligibility schedule was modified |
type |
string |
The role eligibility schedule type. |
Scope
Details of the resource scope
Name | Type | Description |
---|---|---|
displayName |
string |
Display name of the resource |
id |
string |
Scope id of the resource |
type |
string |
Type of the resource |
Status
The status of the role eligibility schedule.
Name | Type | Description |
---|---|---|
Accepted |
string |
|
AdminApproved |
string |
|
AdminDenied |
string |
|
Canceled |
string |
|
Denied |
string |
|
Failed |
string |
|
FailedAsResourceIsLocked |
string |
|
Granted |
string |
|
Invalid |
string |
|
PendingAdminDecision |
string |
|
PendingApproval |
string |
|
PendingApprovalProvisioning |
string |
|
PendingEvaluation |
string |
|
PendingExternalProvisioning |
string |
|
PendingProvisioning |
string |
|
PendingRevocation |
string |
|
PendingScheduleCreation |
string |
|
Provisioned |
string |
|
ProvisioningStarted |
string |
|
Revoked |
string |
|
ScheduleCreated |
string |
|
TimedOut |
string |