Microsoft.Authorization policyAssignments

Bicep 資源定義

policyAssignments 資源類型可以使用目標作業來部署：

如需每個 API 版本中已變更屬性的清單，請參閱 變更記錄檔。

資源格式

若要建立 Microsoft.Authorization/policyAssignments 資源，請將下列 Bicep 新增至範本。

resource symbolicname 'Microsoft.Authorization/policyAssignments@2025-01-01' = {
  scope: resourceSymbolicName or scope
  identity: {
    type: 'string'
    userAssignedIdentities: {
      {customized property}: {}
    }
  }
  location: 'string'
  name: 'string'
  properties: {
    assignmentType: 'string'
    definitionVersion: 'string'
    description: 'string'
    displayName: 'string'
    enforcementMode: 'string'
    metadata: any(Azure.Bicep.Types.Concrete.AnyType)
    nonComplianceMessages: [
      {
        message: 'string'
        policyDefinitionReferenceId: 'string'
      }
    ]
    notScopes: [
      'string'
    ]
    overrides: [
      {
        kind: 'string'
        selectors: [
          {
            in: [
              'string'
            ]
            kind: 'string'
            notIn: [
              'string'
            ]
          }
        ]
        value: 'string'
      }
    ]
    parameters: {
      {customized property}: {
        value: any(Azure.Bicep.Types.Concrete.AnyType)
      }
    }
    policyDefinitionId: 'string'
    resourceSelectors: [
      {
        name: 'string'
        selectors: [
          {
            in: [
              'string'
            ]
            kind: 'string'
            notIn: [
              'string'
            ]
          }
        ]
      }
    ]
  }
}

屬性值

身份

IdentityUserAssignedIdentities

Microsoft.Authorization/policyAssignments

NonComplianceMessage

覆蓋

ParameterValues

ParameterValuesValue

PolicyAssignmentProperties

ResourceSelector

選擇器

UserAssignedIdentitiesValue

快速入門範例

下列快速入門範例會部署此資源類型。

ARM 樣本資源定義

policyAssignments 資源類型可以使用目標作業來部署：

如需每個 API 版本中已變更屬性的清單，請參閱 變更記錄檔。

資源格式

若要建立 Microsoft.Authorization/policyAssignments 資源，請將下列 JSON 新增至範本。

{
  "type": "Microsoft.Authorization/policyAssignments",
  "apiVersion": "2025-01-01",
  "name": "string",
  "identity": {
    "type": "string",
    "userAssignedIdentities": {
      "{customized property}": {
      }
    }
  },
  "location": "string",
  "properties": {
    "assignmentType": "string",
    "definitionVersion": "string",
    "description": "string",
    "displayName": "string",
    "enforcementMode": "string",
    "metadata": {},
    "nonComplianceMessages": [
      {
        "message": "string",
        "policyDefinitionReferenceId": "string"
      }
    ],
    "notScopes": [ "string" ],
    "overrides": [
      {
        "kind": "string",
        "selectors": [
          {
            "in": [ "string" ],
            "kind": "string",
            "notIn": [ "string" ]
          }
        ],
        "value": "string"
      }
    ],
    "parameters": {
      "{customized property}": {
        "value": {}
      }
    },
    "policyDefinitionId": "string",
    "resourceSelectors": [
      {
        "name": "string",
        "selectors": [
          {
            "in": [ "string" ],
            "kind": "string",
            "notIn": [ "string" ]
          }
        ]
      }
    ]
  }
}

屬性值

身份

IdentityUserAssignedIdentities

Microsoft.Authorization/policyAssignments

NonComplianceMessage

覆蓋

ParameterValues

ParameterValuesValue

PolicyAssignmentProperties

ResourceSelector

選擇器

UserAssignedIdentitiesValue

快速入門範本

下列快速入門範本會部署此資源類型。

範本	描述
將內建原則指派給現有的資源群組	此範本會將內建原則指派給現有的資源群組。
指派內建原則以稽核 VM 受控磁碟	此範本會將內建原則指派給資源群組範圍，以稽核虛擬機 （VM） 受控磁碟。
建立 Azure 虛擬網路管理員和範例 VNET	此範本會將 Azure 虛擬網路管理員和範例虛擬網路部署到具名資源群組中。 它支援多個連線拓撲和網路群組成員資格類型。
部署原則 def 並指派給多個 Mgmt 群組	此範本是管理群組層級範本，會建立原則定義，並將該原則指派給多個管理群組。
部署原則定義，並指派給管理群組	此範本是管理群組層級範本，會建立原則定義，並將該原則指派給目標管理群組。 目前無法透過 Azure 入口網站部署此範本。

Terraform （AzAPI 提供者） 資源定義

policyAssignments 資源類型可以使用目標作業來部署：

如需每個 API 版本中已變更屬性的清單，請參閱 變更記錄檔。

資源格式

若要建立 Microsoft.Authorization/policyAssignments 資源，請將下列 Terraform 新增至範本。

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.Authorization/policyAssignments@2025-01-01"
  name = "string"
  parent_id = "string"
  identity = {
    type = "string"
    userAssignedIdentities = {
      {customized property} = {
      }
    }
  }
  location = "string"
  body = jsonencode({
    properties = {
      assignmentType = "string"
      definitionVersion = "string"
      description = "string"
      displayName = "string"
      enforcementMode = "string"
      metadata = ?
      nonComplianceMessages = [
        {
          message = "string"
          policyDefinitionReferenceId = "string"
        }
      ]
      notScopes = [
        "string"
      ]
      overrides = [
        {
          kind = "string"
          selectors = [
            {
              in = [
                "string"
              ]
              kind = "string"
              notIn = [
                "string"
              ]
            }
          ]
          value = "string"
        }
      ]
      parameters = {
        {customized property} = {
          value = ?
        }
      }
      policyDefinitionId = "string"
      resourceSelectors = [
        {
          name = "string"
          selectors = [
            {
              in = [
                "string"
              ]
              kind = "string"
              notIn = [
                "string"
              ]
            }
          ]
        }
      ]
    }
  })
}

屬性值

身份

IdentityUserAssignedIdentities

Microsoft.Authorization/policyAssignments

NonComplianceMessage

覆蓋

ParameterValues

ParameterValuesValue

PolicyAssignmentProperties

ResourceSelector

選擇器

UserAssignedIdentitiesValue