Azure Policy Aliases
GitHub Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

Role Management Policies

Link to resource definition: Microsoft.Authorization/roleManagementPolicies

Default Path Alias
properties.description Microsoft.Authorization/roleManagementPolicies/description
properties.displayName Microsoft.Authorization/roleManagementPolicies/displayName
properties.effectiveRules Microsoft.Authorization/roleManagementPolicies/effectiveRules
properties.effectiveRules[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyAuthenticationContextRule
properties.effectiveRules[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*]
properties.effectiveRules[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule
properties.effectiveRules[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyExpirationRule
properties.effectiveRules[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyEnablementRule
properties.effectiveRules[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyNotificationRule
properties.effectiveRules[*].claimValue Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyAuthenticationContextRule.claimValue
properties.effectiveRules[*].enabledRules Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyEnablementRule.enabledRules
properties.effectiveRules[*].enabledRules[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyEnablementRule.enabledRules[*]
properties.effectiveRules[*].id Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].id
properties.effectiveRules[*].isDefaultRecipientsEnabled Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyNotificationRule.isDefaultRecipientsEnabled
properties.effectiveRules[*].isEnabled Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyAuthenticationContextRule.isEnabled
properties.effectiveRules[*].isExpirationRequired Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyExpirationRule.isExpirationRequired
properties.effectiveRules[*].maximumDuration Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyExpirationRule.maximumDuration
properties.effectiveRules[*].notificationLevel Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyNotificationRule.notificationLevel
properties.effectiveRules[*].notificationRecipients Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyNotificationRule.notificationRecipients
properties.effectiveRules[*].notificationRecipients[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyNotificationRule.notificationRecipients[*]
properties.effectiveRules[*].notificationType Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyNotificationRule.notificationType
properties.effectiveRules[*].recipientType Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyNotificationRule.recipientType
properties.effectiveRules[*].ruleType Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].ruleType
properties.effectiveRules[*].setting Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting
properties.effectiveRules[*].setting.approvalMode Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalMode
properties.effectiveRules[*].setting.approvalStages Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages
properties.effectiveRules[*].setting.approvalStages[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*]
properties.effectiveRules[*].setting.approvalStages[*].approvalStageTimeOutInDays Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].approvalStageTimeOutInDays
properties.effectiveRules[*].setting.approvalStages[*].escalationApprovers Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers
properties.effectiveRules[*].setting.approvalStages[*].escalationApprovers[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*]
properties.effectiveRules[*].setting.approvalStages[*].escalationApprovers[*].description Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].description
properties.effectiveRules[*].setting.approvalStages[*].escalationApprovers[*].id Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].id
properties.effectiveRules[*].setting.approvalStages[*].escalationApprovers[*].isBackup Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].isBackup
properties.effectiveRules[*].setting.approvalStages[*].escalationApprovers[*].userType Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].userType
properties.effectiveRules[*].setting.approvalStages[*].escalationTimeInMinutes Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationTimeInMinutes
properties.effectiveRules[*].setting.approvalStages[*].isApproverJustificationRequired Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].isApproverJustificationRequired
properties.effectiveRules[*].setting.approvalStages[*].isEscalationEnabled Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].isEscalationEnabled
properties.effectiveRules[*].setting.approvalStages[*].primaryApprovers Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers
properties.effectiveRules[*].setting.approvalStages[*].primaryApprovers[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*]
properties.effectiveRules[*].setting.approvalStages[*].primaryApprovers[*].description Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].description
properties.effectiveRules[*].setting.approvalStages[*].primaryApprovers[*].id Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].id
properties.effectiveRules[*].setting.approvalStages[*].primaryApprovers[*].isBackup Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].isBackup
properties.effectiveRules[*].setting.approvalStages[*].primaryApprovers[*].userType Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].userType
properties.effectiveRules[*].setting.isApprovalRequired Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.isApprovalRequired
properties.effectiveRules[*].setting.isApprovalRequiredForExtension Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.isApprovalRequiredForExtension
properties.effectiveRules[*].setting.isRequestorJustificationRequired Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].RoleManagementPolicyApprovalRule.setting.isRequestorJustificationRequired
properties.effectiveRules[*].target Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target
properties.effectiveRules[*].target.caller Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.caller
properties.effectiveRules[*].target.enforcedSettings Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.enforcedSettings
properties.effectiveRules[*].target.enforcedSettings[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.enforcedSettings[*]
properties.effectiveRules[*].target.inheritableSettings Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.inheritableSettings
properties.effectiveRules[*].target.inheritableSettings[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.inheritableSettings[*]
properties.effectiveRules[*].target.level Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.level
properties.effectiveRules[*].target.operations Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.operations
properties.effectiveRules[*].target.operations[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.operations[*]
properties.effectiveRules[*].target.targetObjects Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.targetObjects
properties.effectiveRules[*].target.targetObjects[*] Microsoft.Authorization/roleManagementPolicies/effectiveRules[*].target.targetObjects[*]
properties.isOrganizationDefault Microsoft.Authorization/roleManagementPolicies/isOrganizationDefault
properties.lastModifiedBy Microsoft.Authorization/roleManagementPolicies/lastModifiedBy
properties.lastModifiedBy.displayName Microsoft.Authorization/roleManagementPolicies/lastModifiedBy.displayName
properties.lastModifiedBy.email Microsoft.Authorization/roleManagementPolicies/lastModifiedBy.email
properties.lastModifiedBy.id Microsoft.Authorization/roleManagementPolicies/lastModifiedBy.id
properties.lastModifiedBy.type Microsoft.Authorization/roleManagementPolicies/lastModifiedBy.type
properties.lastModifiedDateTime Microsoft.Authorization/roleManagementPolicies/lastModifiedDateTime
properties.policyProperties Microsoft.Authorization/roleManagementPolicies/policyProperties
properties.policyProperties.scope Microsoft.Authorization/roleManagementPolicies/policyProperties.scope
properties.policyProperties.scope.displayName Microsoft.Authorization/roleManagementPolicies/policyProperties.scope.displayName
properties.policyProperties.scope.id Microsoft.Authorization/roleManagementPolicies/policyProperties.scope.id
properties.policyProperties.scope.type Microsoft.Authorization/roleManagementPolicies/policyProperties.scope.type
properties.rules Microsoft.Authorization/roleManagementPolicies/rules
properties.rules[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyAuthenticationContextRule
properties.rules[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyEnablementRule
properties.rules[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyExpirationRule
properties.rules[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyNotificationRule
properties.rules[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule
properties.rules[*] Microsoft.Authorization/roleManagementPolicies/rules[*]
properties.rules[*].claimValue Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyAuthenticationContextRule.claimValue
properties.rules[*].enabledRules Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyEnablementRule.enabledRules
properties.rules[*].enabledRules[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyEnablementRule.enabledRules[*]
properties.rules[*].id Microsoft.Authorization/roleManagementPolicies/rules[*].id
properties.rules[*].isDefaultRecipientsEnabled Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyNotificationRule.isDefaultRecipientsEnabled
properties.rules[*].isEnabled Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyAuthenticationContextRule.isEnabled
properties.rules[*].isExpirationRequired Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyExpirationRule.isExpirationRequired
properties.rules[*].maximumDuration Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyExpirationRule.maximumDuration
properties.rules[*].notificationLevel Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyNotificationRule.notificationLevel
properties.rules[*].notificationRecipients Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyNotificationRule.notificationRecipients
properties.rules[*].notificationRecipients[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyNotificationRule.notificationRecipients[*]
properties.rules[*].notificationType Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyNotificationRule.notificationType
properties.rules[*].recipientType Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyNotificationRule.recipientType
properties.rules[*].ruleType Microsoft.Authorization/roleManagementPolicies/rules[*].ruleType
properties.rules[*].setting Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting
properties.rules[*].setting.approvalMode Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalMode
properties.rules[*].setting.approvalStages Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages
properties.rules[*].setting.approvalStages[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*]
properties.rules[*].setting.approvalStages[*].approvalStageTimeOutInDays Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].approvalStageTimeOutInDays
properties.rules[*].setting.approvalStages[*].escalationApprovers Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers
properties.rules[*].setting.approvalStages[*].escalationApprovers[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*]
properties.rules[*].setting.approvalStages[*].escalationApprovers[*].description Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].description
properties.rules[*].setting.approvalStages[*].escalationApprovers[*].id Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].id
properties.rules[*].setting.approvalStages[*].escalationApprovers[*].isBackup Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].isBackup
properties.rules[*].setting.approvalStages[*].escalationApprovers[*].userType Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationApprovers[*].userType
properties.rules[*].setting.approvalStages[*].escalationTimeInMinutes Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].escalationTimeInMinutes
properties.rules[*].setting.approvalStages[*].isApproverJustificationRequired Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].isApproverJustificationRequired
properties.rules[*].setting.approvalStages[*].isEscalationEnabled Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].isEscalationEnabled
properties.rules[*].setting.approvalStages[*].primaryApprovers Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers
properties.rules[*].setting.approvalStages[*].primaryApprovers[*] Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*]
properties.rules[*].setting.approvalStages[*].primaryApprovers[*].description Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].description
properties.rules[*].setting.approvalStages[*].primaryApprovers[*].id Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].id
properties.rules[*].setting.approvalStages[*].primaryApprovers[*].isBackup Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].isBackup
properties.rules[*].setting.approvalStages[*].primaryApprovers[*].userType Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.approvalStages[*].primaryApprovers[*].userType
properties.rules[*].setting.isApprovalRequired Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.isApprovalRequired
properties.rules[*].setting.isApprovalRequiredForExtension Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.isApprovalRequiredForExtension
properties.rules[*].setting.isRequestorJustificationRequired Microsoft.Authorization/roleManagementPolicies/rules[*].RoleManagementPolicyApprovalRule.setting.isRequestorJustificationRequired
properties.rules[*].target Microsoft.Authorization/roleManagementPolicies/rules[*].target
properties.rules[*].target.caller Microsoft.Authorization/roleManagementPolicies/rules[*].target.caller
properties.rules[*].target.enforcedSettings Microsoft.Authorization/roleManagementPolicies/rules[*].target.enforcedSettings
properties.rules[*].target.enforcedSettings[*] Microsoft.Authorization/roleManagementPolicies/rules[*].target.enforcedSettings[*]
properties.rules[*].target.inheritableSettings Microsoft.Authorization/roleManagementPolicies/rules[*].target.inheritableSettings
properties.rules[*].target.inheritableSettings[*] Microsoft.Authorization/roleManagementPolicies/rules[*].target.inheritableSettings[*]
properties.rules[*].target.level Microsoft.Authorization/roleManagementPolicies/rules[*].target.level
properties.rules[*].target.operations Microsoft.Authorization/roleManagementPolicies/rules[*].target.operations
properties.rules[*].target.operations[*] Microsoft.Authorization/roleManagementPolicies/rules[*].target.operations[*]
properties.rules[*].target.targetObjects Microsoft.Authorization/roleManagementPolicies/rules[*].target.targetObjects
properties.rules[*].target.targetObjects[*] Microsoft.Authorization/roleManagementPolicies/rules[*].target.targetObjects[*]
properties.scope Microsoft.Authorization/roleManagementPolicies/scope