last sync: 2025-Apr-29 17:44:12 Etc/UTC

Policy definition - Microsoft Azure Resource type
microsoft.authorization/policydefinitions

Azure Resource Provider Resource provider (RP) - Microsoft Authorization [Microsoft.Authorization]
RP Microsoft.Authorization
RP display name Microsoft Authorization
Azure Resource Type
RP Resource types
Resource types: 60
Azure Policy Alias
RP aliases
RP aliases: 359
Azure Policy definition
RP Azure Policy
Azure Policy definitions: 32
if: 15
then.deployment: 16
then.details: 1
then.existenceCondition: 2
then.operations: 0
Azure RBAC Role Based Access Control
RP RBAC operations
RP RBAC operations: 76
RP RBAC operationType action: 9
RP RBAC operationType delete: 17
RP RBAC operationType read: 30
RP RBAC operationType write: 20
Azure RBAC Role definition
RP RBAC Roles & Operation actions
Unique RBAC Roles: 344
RBAC Roles with action operationType: 7
RBAC Roles with delete operationType: 23
RBAC Roles with read operationType: 342
RBAC Roles with write operationType: 21
Azure Application
RP related 1st party Service Principals
RP related 1st party Service Principals: 6
• Request Approvals Read Platform (appId: d8c767ef-3e9a-48c4-aef9-562696539b39) [ JSON;CSV]
• n/a (appId: 4eaceb75-fe6c-4953-b873-0fd565ecd334)
• MS-PIM (appId: 01fc33a7-78ba-4d2f-a4b7-768e336e890e) [ JSON;CSV]
• Microsoft Azure Authorization Resource Provider (appId: 1dcb1bc7-c721-498e-b2fa-bcddcea44171) [ JSON;CSV]
• Microsoft Azure Authorization Private Link Provider (appId: de926fbf-e23b-41f9-ae15-c943a9cfa630) [ JSON;CSV]
• Azure RBAC Data Plane (appId: 5861f7fb-5582-4c1a-83c0-fc5ffdb531a6) [ JSON;CSV]
All Azure RPs Microsoft Learn
AzResourceTypesAdvertizer (Microsoft only)
Azure Resource Type Resource type (RT) - Policy definition [microsoft.authorization/policydefinitions]
RT information
RT microsoft.authorization/policydefinitions
RT display name Policy definition
RT type only
(without RP)
policyDefinitions
RT sub- Resource types sub-Resource types: 1
RT schema n/a
All Microsoft Azure RTs AzResourceTypesAdvertizer
Aliases and Azure Policy
Azure Policy Alias
Aliases
aliases: 10
Azure Policy definition
Azure Policy
Azure Policy definitions: 2
if: 1
then.deployment: 1
then.details: 0
then.existenceCondition: 1
then.operations: 0
RBAC Operations and Roles & Roles related operation actions
Azure RBAC Role Based Access Control
RBAC operations
RBAC operations: 3
RBAC operationType delete: 1
RBAC operationType read: 1
RBAC operationType write: 1
Azure RBAC Role definition
RBAC Roles & Operation actions
Unique RBAC Roles: 313
RBAC Roles with delete operationType: 6
RBAC Roles with read operationType: 313
RBAC Roles with write operationType: 6
Capabilities & Locations
Azure Resource Diagnostic settings logs
Diagnostic logs
False
Azure Resource Diagnostic settings metrics
Diagnostic metrics
False
Azure Customer-managed key
Customer-managed key (CMK) [experimental]
Unknown
Enforce Encryption with a customer-managed key (CMK) at scale
Azure Managed identity
System-Assigned-Resource-Identity
False
Azure Resource Mover
Cross-ResourceGroup-Resource-Move
False
Azure Resource Mover
Cross-Subscription-Resource-Move
False
Azure Resource Tags
Tags
False
Azure Extension
Extension
True
Azure Private Endpoint
Private-Endpoint
False
Azure Private Endpoint location Azure Private Endpoint location
Supported Locations for Private-Endpoint
n/a
Non supported Locations for Private-Endpoint n/a
Azure location
Location
False
Azure Resource type location Azure Resource type location
Locations
n/a
Not locations n/a
Assessment tooling
Azure Advisor
Azure Advisor
n/a
Azure Proactive Resilience Library v2 (APRLv2)
Azure Proactive Resilience Library v2 (APRLv2)
n/a
PSRule for Azure
PSRule for Azure
PSRule for Azure rules: 1
Operational Excellence [Awareness] Use descriptive policies
Azure Quick Review (AZQR)
Azure Quick Review (AZQR)
n/a
Infrastructure as Code (IaC)
ARM (Azure Resource Manager)
ARM (Azure Resource Manager) templates
ARM (Azure Resource Manager) template API versions: 16
latest
Azure Bicep
Bicep templates
Bicep template API versions: 16
latest
Terraform
Terraform provider
Terraform providers: 1
policy_definition
AzAPI Terraform
AzAPI Terraform templates
AzAPI Terraform template API versions: 16
latest
Pulumi
Pulumi provider
Pulumi providers: 2
authorization/policydefinition
authorization/policydefinitionatmanagementgroup
OpenTofu
OpenTofu provider
OpenTofu TF providers: 1
policy_definition
Azure Verified Modules (AVM) Bicep Azure Verified Modules (AVM) Bicep
Azure Verified Modules (AVM) Bicep
n/a
Azure Verified Modules (AVM) Terraform Azure Verified Modules (AVM) Terraform
Azure Verified Modules (AVM) Terraform
n/a
REST-API (Representational State Transfer - Application Programming Interface)
REST-API versions REST-API versions: 15
2025-01-01
2024-05-01
2023-04-01
2021-06-01
2020-09-01
2020-08-01
2020-03-01
2019-09-01
2019-06-01
2019-01-01
2018-05-01
2018-03-01
2016-12-01
2016-04-01
2015-10-01-preview
REST-API version default n/a
API profiles API profiles: 3
2018-06-01-profile
2018-03-01;2019-03-01-hybrid
2016-12-01
Resource naming
Azure Naming Tool
Azure Naming Tool
The Azure Naming Tool was created to help administrators define and manage their naming conventions, while providing a simple interface for users to generate a compliant name.
Resource naming details
[
  {
    "property": "Resoure Name",
    "ShortName": "policy",
    "scope": "scope of definition",
    "lengthMin": "1",
    "lengthMax": "64",
    "validText": "Display name can contain any characters.",
    "invalidText": "Can't include percent sign and can't end with period or space.",
    "invalidCharacters": "%",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": ". ",
    "invalidCharactersConsecutive": "",
    "regx": "^(?!.*[\\.]$)(?!.* $)[^%]{1,64}$",
    "staticValues": ""
  },
  {
    "property": "Display Name",
    "ShortName": "policy",
    "scope": "scope of definition",
    "lengthMin": "1",
    "lengthMax": "128",
    "validText": "Display name can contain any characters.",
    "invalidText": "Can't include percent sign and can't end with period or space.",
    "invalidCharacters": "%",
    "invalidCharactersStart": "",
    "invalidCharactersEnd": ". ",
    "invalidCharactersConsecutive": "",
    "regx": "^(?!.*[\\.]$)(?!.* $)[^%]{1,128}$",
    "staticValues": ""
  }
]