DenySettings.ExcludedActions Property

Definition

List of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.

public System.Collections.Generic.IList<string> ExcludedActions { get; }
member this.ExcludedActions : System.Collections.Generic.IList<string>
Public ReadOnly Property ExcludedActions As IList(Of String)

Property Value

Applies to