Role Assignment Schedule Instances - List For Scope

Gets role assignment schedule instances of a role assignment schedule.

GET https://management.azure.com/{scope}/providers/Microsoft.Authorization/roleAssignmentScheduleInstances?api-version=2020-10-01
GET https://management.azure.com/{scope}/providers/Microsoft.Authorization/roleAssignmentScheduleInstances?$filter={$filter}&api-version=2020-10-01

URI Parameters

Name In Required Type Description
scope
path True

string

The scope of the role assignment schedule.

api-version
query True

string

The API version to use for this operation.

$filter
query

string

The filter to apply on the operation. Use $filter=atScope() to return all role assignment schedules at or above the scope. Use $filter=principalId eq {id} to return all role assignment schedules at, above or below the scope for the specified principal. Use $filter=assignedTo('{userId}') to return all role assignment schedule instances for the user. Use $filter=asTarget() to return all role assignment schedule instances created for the current user.

Responses

Name Type Description
200 OK

RoleAssignmentScheduleInstanceListResult

OK - Returns array of role assignment schedule instances.

Other Status Codes

CloudError

Error response describing why the operation failed.

Security

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name Description
user_impersonation impersonate your user account

Examples

GetRoleAssignmentScheduleInstancesByScope

Sample request

GET https://management.azure.com/providers/Microsoft.Subscription/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleAssignmentScheduleInstances?$filter=assignedTo('a3bb8764-cb92-4276-9d2a-ca1e895e55ea')&api-version=2020-10-01

Sample response

{
  "value": [
    {
      "properties": {
        "originRoleAssignmentId": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleAssignments/ed9b8180-cef7-4c77-a63c-b8566ecfc412",
        "linkedRoleEligibilityScheduleId": "b1477448-2cc6-4ceb-93b4-54a202a89413",
        "linkedRoleEligibilityScheduleInstanceId": "21e4b59a-0499-4fe0-a3c3-43a3055b773a",
        "assignmentType": "Assigned",
        "scope": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f",
        "roleDefinitionId": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608",
        "principalId": "a3bb8764-cb92-4276-9d2a-ca1e895e55ea",
        "principalType": "User",
        "status": "Accepted",
        "roleAssignmentScheduleId": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/RoleAssignmentSchedules/c9e264ff-3133-4776-a81a-ebc7c33c8ec6",
        "startDateTime": "2020-09-09T21:35:27.91Z",
        "endDateTime": "2020-09-10T05:35:17.91Z",
        "memberType": "Direct",
        "createdOn": "2020-09-09T21:35:27.91Z",
        "condition": "@Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'",
        "conditionVersion": "1.0",
        "expandedProperties": {
          "scope": {
            "id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f",
            "displayName": "Pay-As-You-Go",
            "type": "subscription"
          },
          "roleDefinition": {
            "id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/roleDefinitions/c8d4ff99-41c3-41a8-9f60-21dfdad59608",
            "displayName": "Contributor",
            "type": "BuiltInRole"
          },
          "principal": {
            "id": "a3bb8764-cb92-4276-9d2a-ca1e895e55ea",
            "displayName": "User Account",
            "email": "user@my-tenant.com",
            "type": "User"
          }
        }
      },
      "name": "ed9b8180-cef7-4c77-a63c-b8566ecfc412",
      "id": "/subscriptions/dfa2a084-766f-4003-8ae1-c4aeb893a99f/providers/Microsoft.Authorization/RoleAssignmentScheduleInstances/ed9b8180-cef7-4c77-a63c-b8566ecfc412",
      "type": "Microsoft.Authorization/RoleAssignmentScheduleInstances"
    }
  ]
}

Definitions

Name Description
AssignmentType

Assignment type of the role assignment schedule

CloudError

An error response from the service.

CloudErrorBody

An error response from the service.

ExpandedProperties
MemberType

Membership type of the role assignment schedule

Principal

Details of the principal

principalType

The principal type of the assigned principal ID.

RoleAssignmentScheduleInstance

Information about current or upcoming role assignment schedule instance

RoleAssignmentScheduleInstanceListResult

Role assignment schedule instance list operation result.

RoleDefinition

Details of role definition

Scope

Details of the resource scope

Status

The status of the role assignment schedule instance.

AssignmentType

Assignment type of the role assignment schedule

Name Type Description
Activated

string

Assigned

string

CloudError

An error response from the service.

Name Type Description
error

CloudErrorBody

An error response from the service.

CloudErrorBody

An error response from the service.

Name Type Description
code

string

An identifier for the error. Codes are invariant and are intended to be consumed programmatically.

message

string

A message describing the error, intended to be suitable for display in a user interface.

ExpandedProperties

Name Type Description
principal

Principal

Details of the principal

roleDefinition

RoleDefinition

Details of role definition

scope

Scope

Details of the resource scope

MemberType

Membership type of the role assignment schedule

Name Type Description
Direct

string

Group

string

Inherited

string

Principal

Details of the principal

Name Type Description
displayName

string

Display name of the principal

email

string

Email id of the principal

id

string

Id of the principal

type

string

Type of the principal

principalType

The principal type of the assigned principal ID.

Name Type Description
Device

string

ForeignGroup

string

Group

string

ServicePrincipal

string

User

string

RoleAssignmentScheduleInstance

Information about current or upcoming role assignment schedule instance

Name Type Description
id

string

The role assignment schedule instance ID.

name

string

The role assignment schedule instance name.

properties.assignmentType

AssignmentType

Assignment type of the role assignment schedule

properties.condition

string

The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'

properties.conditionVersion

string

Version of the condition. Currently accepted value is '2.0'

properties.createdOn

string

DateTime when role assignment schedule was created

properties.endDateTime

string

The endDateTime of the role assignment schedule instance

properties.expandedProperties

ExpandedProperties

Additional properties of principal, scope and role definition

properties.linkedRoleEligibilityScheduleId

string

roleEligibilityScheduleId used to activate

properties.linkedRoleEligibilityScheduleInstanceId

string

roleEligibilityScheduleInstanceId linked to this roleAssignmentScheduleInstance

properties.memberType

MemberType

Membership type of the role assignment schedule

properties.originRoleAssignmentId

string

Role Assignment Id in external system

properties.principalId

string

The principal ID.

properties.principalType

principalType

The principal type of the assigned principal ID.

properties.roleAssignmentScheduleId

string

Id of the master role assignment schedule

properties.roleDefinitionId

string

The role definition ID.

properties.scope

string

The role assignment schedule scope.

properties.startDateTime

string

The startDateTime of the role assignment schedule instance

properties.status

Status

The status of the role assignment schedule instance.

type

string

The role assignment schedule instance type.

RoleAssignmentScheduleInstanceListResult

Role assignment schedule instance list operation result.

Name Type Description
nextLink

string

The URL to use for getting the next set of results.

value

RoleAssignmentScheduleInstance[]

Role assignment schedule instance list.

RoleDefinition

Details of role definition

Name Type Description
displayName

string

Display name of the role definition

id

string

Id of the role definition

type

string

Type of the role definition

Scope

Details of the resource scope

Name Type Description
displayName

string

Display name of the resource

id

string

Scope id of the resource

type

string

Type of the resource

Status

The status of the role assignment schedule instance.

Name Type Description
Accepted

string

AdminApproved

string

AdminDenied

string

Canceled

string

Denied

string

Failed

string

FailedAsResourceIsLocked

string

Granted

string

Invalid

string

PendingAdminDecision

string

PendingApproval

string

PendingApprovalProvisioning

string

PendingEvaluation

string

PendingExternalProvisioning

string

PendingProvisioning

string

PendingRevocation

string

PendingScheduleCreation

string

Provisioned

string

ProvisioningStarted

string

Revoked

string

ScheduleCreated

string

TimedOut

string