role_management_policies_effective_rules

Creates, updates, deletes, gets or lists a role_management_policies_effective_rules resource.

Overview

Name	role_management_policies_effective_rules
Type	Resource
Id	entra_id.policies.role_management_policies_effective_rules

Fields

The following fields are returned by SELECT queries:

get

Retrieved navigation property

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
target		Defines details of scope that's targeted by role management policy rule. The details can include the principal type, the role assignment type, and actions affecting a role. Supports $filter (eq, ne).

list

Retrieved collection

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
target		Defines details of scope that's targeted by role management policy rule. The details can include the principal type, the role assignment type, and actions affecting a role. Supports $filter (eq, ne).

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	unified_role_management_policy_id, unified_role_management_policy_rule_id		The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand.
list	select	unified_role_management_policy_id		The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand.
insert	insert	unified_role_management_policy_id
update	update	unified_role_management_policy_id, unified_role_management_policy_rule_id
delete	delete	unified_role_management_policy_id, unified_role_management_policy_rule_id	If-Match

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
unified_role_management_policy_id	string	The unique identifier of unifiedRoleManagementPolicy
unified_role_management_policy_rule_id	string	The unique identifier of unifiedRoleManagementPolicyRule
If-Match	string	ETag

SELECT examples

get

The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand.

SELECT
id,
target
FROM entra_id.policies.role_management_policies_effective_rules
WHERE unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' -- required
AND unified_role_management_policy_rule_id = '{{ unified_role_management_policy_rule_id }}' -- required
;

list

The list of effective rules like approval rules and expiration rules evaluated based on inherited referenced rules. For example, if there is a tenant-wide policy to enforce enabling an approval rule, the effective rule will be to enable approval even if the policy has a rule to disable approval. Supports $expand.

SELECT
id,
target
FROM entra_id.policies.role_management_policies_effective_rules
WHERE unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' -- required
;

INSERT examples

insert

No description available.

INSERT INTO entra_id.policies.role_management_policies_effective_rules (
id,
target,
unified_role_management_policy_id
)
SELECT 
'{{ id }}',
'{{ target }}',
'{{ unified_role_management_policy_id }}'
RETURNING
id,
target
;

Manifest

# Description fields are for documentation purposes
- name: role_management_policies_effective_rules
props:
  - name: unified_role_management_policy_id
    value: "{{ unified_role_management_policy_id }}"
    description: Required parameter for the role_management_policies_effective_rules resource.
  - name: id
    value: "{{ id }}"
    description: |
      The unique identifier for an entity. Read-only.
  - name: target
    value: "{{ target }}"
    description: |
      Defines details of scope that's targeted by role management policy rule. The details can include the principal type, the role assignment type, and actions affecting a role. Supports $filter (eq, ne).

UPDATE examples

update

No description available.

UPDATE entra_id.policies.role_management_policies_effective_rules
SET 
id = '{{ id }}',
target = '{{ target }}'
WHERE 
unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' --required
AND unified_role_management_policy_rule_id = '{{ unified_role_management_policy_rule_id }}' --required
RETURNING
id,
target;

DELETE examples

delete

No description available.

DELETE FROM entra_id.policies.role_management_policies_effective_rules
WHERE unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' --required
AND unified_role_management_policy_rule_id = '{{ unified_role_management_policy_rule_id }}' --required
AND If-Match = '{{ If-Match }}'
;