role_management_policies_rules

Creates, updates, deletes, gets or lists a role_management_policies_rules resource.

Overview

Name	role_management_policies_rules
Type	Resource
Id	entra_id.policies.role_management_policies_rules

Fields

The following fields are returned by SELECT queries:

get

Retrieved navigation property

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
target		Defines details of scope that's targeted by role management policy rule. The details can include the principal type, the role assignment type, and actions affecting a role. Supports $filter (eq, ne).

list

Retrieved collection

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
target		Defines details of scope that's targeted by role management policy rule. The details can include the principal type, the role assignment type, and actions affecting a role. Supports $filter (eq, ne).

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	unified_role_management_policy_id, unified_role_management_policy_rule_id		Retrieve a rule or settings defined for a role management policy. The rule can be one of the following types that are derived from the unifiedRoleManagementPolicyRule object:
list	select	unified_role_management_policy_id		Get the rules or settings defined for a role management policy. The rules are a collection of following types that are derived from the unifiedRoleManagementPolicyRule object:
insert	insert	unified_role_management_policy_id
update	update	unified_role_management_policy_id, unified_role_management_policy_rule_id		Update a rule defined for a role management policy. The rule can be one of the following types that are derived from the unifiedRoleManagementPolicyRule object: For more information about rules for Microsoft Entra roles and examples of updating rules, see the following articles:
delete	delete	unified_role_management_policy_id, unified_role_management_policy_rule_id	If-Match

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
unified_role_management_policy_id	string	The unique identifier of unifiedRoleManagementPolicy
unified_role_management_policy_rule_id	string	The unique identifier of unifiedRoleManagementPolicyRule
If-Match	string	ETag

SELECT examples

get

Retrieve a rule or settings defined for a role management policy. The rule can be one of the following types that are derived from the unifiedRoleManagementPolicyRule object:

SELECT
id,
target
FROM entra_id.policies.role_management_policies_rules
WHERE unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' -- required
AND unified_role_management_policy_rule_id = '{{ unified_role_management_policy_rule_id }}' -- required
;

list

Get the rules or settings defined for a role management policy. The rules are a collection of following types that are derived from the unifiedRoleManagementPolicyRule object:

SELECT
id,
target
FROM entra_id.policies.role_management_policies_rules
WHERE unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' -- required
;

INSERT examples

insert

No description available.

INSERT INTO entra_id.policies.role_management_policies_rules (
id,
target,
unified_role_management_policy_id
)
SELECT 
'{{ id }}',
'{{ target }}',
'{{ unified_role_management_policy_id }}'
RETURNING
id,
target
;

Manifest

# Description fields are for documentation purposes
- name: role_management_policies_rules
props:
  - name: unified_role_management_policy_id
    value: "{{ unified_role_management_policy_id }}"
    description: Required parameter for the role_management_policies_rules resource.
  - name: id
    value: "{{ id }}"
    description: |
      The unique identifier for an entity. Read-only.
  - name: target
    value: "{{ target }}"
    description: |
      Defines details of scope that's targeted by role management policy rule. The details can include the principal type, the role assignment type, and actions affecting a role. Supports $filter (eq, ne).

UPDATE examples

update

Update a rule defined for a role management policy. The rule can be one of the following types that are derived from the unifiedRoleManagementPolicyRule object: For more information about rules for Microsoft Entra roles and examples of updating rules, see the following articles:

UPDATE entra_id.policies.role_management_policies_rules
SET 
id = '{{ id }}',
target = '{{ target }}'
WHERE 
unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' --required
AND unified_role_management_policy_rule_id = '{{ unified_role_management_policy_rule_id }}' --required
RETURNING
id,
target;

DELETE examples

delete

No description available.

DELETE FROM entra_id.policies.role_management_policies_rules
WHERE unified_role_management_policy_id = '{{ unified_role_management_policy_id }}' --required
AND unified_role_management_policy_rule_id = '{{ unified_role_management_policy_rule_id }}' --required
AND If-Match = '{{ If-Match }}'
;