rbac

Documentation

Index

• Constants
• func ResourceGroupRoleAssignment(roleID, spID string, condition ...interface{}) *arm.Resource
• func ResourceGroupRoleAssignmentWithName(roleID, spID string, name string, condition ...interface{}) *arm.Resource
• func ResourceRoleAssignment(roleID, spID, resourceType, resourceName string, condition ...interface{}) *arm.Resource
• func ResourceRoleAssignmentWithName(roleID, spID, resourceType, resourceName, name string, ...) *arm.Resource

Constants

const (
	RoleACRPull                                     = "7f951dda-4ed3-4680-a7ca-43fe172d538d"
	RoleContributor                                 = "b24988ac-6180-42a0-ab88-20f7382dd24c"
	RoleDocumentDBAccountContributor                = "5bd9cd88-fe45-4216-938b-f97437e15450"
	RoleDocumentDBDataContributor                   = "00000000-0000-0000-0000-000000000002"
	RoleDNSZoneContributor                          = "befefa01-2a29-4197-83a8-272ff33ce314"
	RoleNetworkContributor                          = "4d97b98b-1d4f-4787-a291-c67834d212e7"
	RoleOwner                                       = "8e3af657-a8ff-443c-a75c-2fe8c4bcb635"
	RoleReader                                      = "acdd72a7-3385-48ef-bd42-f606fba81ae7"
	RoleStorageBlobDataContributor                  = "ba92f5b4-2d11-453d-a403-e96b0029c9fe"
	RoleKeyVaultSecretsOfficer                      = "b86a8fe4-44ce-4948-aee5-eccb2c155cd7"
	RoleAzureRedHatOpenShiftFederatedCredentialRole = "ef318e2a-8334-4a05-9e4a-295a196c6a6e"
)

Functions

func ResourceGroupRoleAssignment

func ResourceGroupRoleAssignment(roleID, spID string, condition ...interface{}) *arm.Resource

ResourceGroupRoleAssignment returns a Resource granting roleID on the current resource group to spID. Argument spID must be a valid ARM expression, e.g. "'foo'" or "concat('foo')". Use this function in new ARM templates.

func ResourceGroupRoleAssignmentWithName

func ResourceGroupRoleAssignmentWithName(roleID, spID string, name string, condition ...interface{}) *arm.Resource

ResourceGroupRoleAssignmentWithName returns a Resource granting roleID on the current resource group to spID. Arguments spID and name must be valid ARM expressions, e.g. "'foo'" or "concat('foo')". Use this function in ARM templates which have already been deployed, to preserve the name and avoid a RoleAssignmentExists error.

func ResourceRoleAssignment

func ResourceRoleAssignment(roleID, spID, resourceType, resourceName string, condition ...interface{}) *arm.Resource

ResourceRoleAssignment returns a Resource granting roleID on the resource of type resourceType with name resourceName to spID. Arguments resourceName and spID must be valid ARM expressions, e.g. "'foo'" or "concat('foo')". Use this function in new ARM templates.

func ResourceRoleAssignmentWithName

func ResourceRoleAssignmentWithName(roleID, spID, resourceType, resourceName, name string, condition ...interface{}) *arm.Resource

ResourceRoleAssignmentWithName returns a Resource granting roleID on the resource of type resourceType with name resourceName to spID. Arguments resourceName, spID and name must be valid ARM expressions, e.g. "'foo'" or "concat('foo')". Use this function in ARM templates which have already been deployed, to preserve the name and avoid a RoleAssignmentExists error.