Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native v2
  3. API Docs
  4. authorization
  5. PolicyDefinitionVersionAtManagementGroup
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native-v2.authorization.PolicyDefinitionVersionAtManagementGroup

Explore with Pulumi AI

These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native

The ID of the policy definition version. Azure REST API version: 2023-04-01.

Other available API versions: 2024-05-01, 2025-01-01.

Example Usage

Create or update a policy definition version at management group level

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var policyDefinitionVersionAtManagementGroup = new AzureNative.Authorization.PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroup", new()
    {
        Description = "Force resource names to begin with given 'prefix' and/or end with given 'suffix'",
        DisplayName = "Enforce resource naming convention",
        ManagementGroupName = "MyManagementGroup",
        Metadata = new Dictionary<string, object?>
        {
            ["category"] = "Naming",
        },
        Mode = "All",
        Parameters = 
        {
            { "prefix", new AzureNative.Authorization.Inputs.ParameterDefinitionsValueArgs
            {
                Metadata = new AzureNative.Authorization.Inputs.ParameterDefinitionsValueMetadataArgs
                {
                    Description = "Resource name prefix",
                    DisplayName = "Prefix",
                },
                Type = AzureNative.Authorization.ParameterType.String,
            } },
            { "suffix", new AzureNative.Authorization.Inputs.ParameterDefinitionsValueArgs
            {
                Metadata = new AzureNative.Authorization.Inputs.ParameterDefinitionsValueMetadataArgs
                {
                    Description = "Resource name suffix",
                    DisplayName = "Suffix",
                },
                Type = AzureNative.Authorization.ParameterType.String,
            } },
        },
        PolicyDefinitionName = "ResourceNaming",
        PolicyDefinitionVersion = "1.2.1",
        PolicyRule = new Dictionary<string, object?>
        {
            ["if"] = new Dictionary<string, object?>
            {
                ["not"] = new Dictionary<string, object?>
                {
                    ["field"] = "name",
                    ["like"] = "[concat(parameters('prefix'), '*', parameters('suffix'))]",
                },
            },
            ["then"] = new Dictionary<string, object?>
            {
                ["effect"] = "deny",
            },
        },
        Version = "1.2.1",
    });

});
Copy
package main

import (
	authorization "github.com/pulumi/pulumi-azure-native-sdk/authorization/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := authorization.NewPolicyDefinitionVersionAtManagementGroup(ctx, "policyDefinitionVersionAtManagementGroup", &authorization.PolicyDefinitionVersionAtManagementGroupArgs{
			Description:         pulumi.String("Force resource names to begin with given 'prefix' and/or end with given 'suffix'"),
			DisplayName:         pulumi.String("Enforce resource naming convention"),
			ManagementGroupName: pulumi.String("MyManagementGroup"),
			Metadata: pulumi.Any(map[string]interface{}{
				"category": "Naming",
			}),
			Mode: pulumi.String("All"),
			Parameters: authorization.ParameterDefinitionsValueMap{
				"prefix": &authorization.ParameterDefinitionsValueArgs{
					Metadata: &authorization.ParameterDefinitionsValueMetadataArgs{
						Description: pulumi.String("Resource name prefix"),
						DisplayName: pulumi.String("Prefix"),
					},
					Type: pulumi.String(authorization.ParameterTypeString),
				},
				"suffix": &authorization.ParameterDefinitionsValueArgs{
					Metadata: &authorization.ParameterDefinitionsValueMetadataArgs{
						Description: pulumi.String("Resource name suffix"),
						DisplayName: pulumi.String("Suffix"),
					},
					Type: pulumi.String(authorization.ParameterTypeString),
				},
			},
			PolicyDefinitionName:    pulumi.String("ResourceNaming"),
			PolicyDefinitionVersion: pulumi.String("1.2.1"),
			PolicyRule: pulumi.Any(map[string]interface{}{
				"if": map[string]interface{}{
					"not": map[string]interface{}{
						"field": "name",
						"like":  "[concat(parameters('prefix'), '*', parameters('suffix'))]",
					},
				},
				"then": map[string]interface{}{
					"effect": "deny",
				},
			}),
			Version: pulumi.String("1.2.1"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.authorization.PolicyDefinitionVersionAtManagementGroup;
import com.pulumi.azurenative.authorization.PolicyDefinitionVersionAtManagementGroupArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var policyDefinitionVersionAtManagementGroup = new PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroup", PolicyDefinitionVersionAtManagementGroupArgs.builder()
            .description("Force resource names to begin with given 'prefix' and/or end with given 'suffix'")
            .displayName("Enforce resource naming convention")
            .managementGroupName("MyManagementGroup")
            .metadata(Map.of("category", "Naming"))
            .mode("All")
            .parameters(Map.ofEntries(
                Map.entry("prefix", Map.ofEntries(
                    Map.entry("metadata", Map.ofEntries(
                        Map.entry("description", "Resource name prefix"),
                        Map.entry("displayName", "Prefix")
                    )),
                    Map.entry("type", "String")
                )),
                Map.entry("suffix", Map.ofEntries(
                    Map.entry("metadata", Map.ofEntries(
                        Map.entry("description", "Resource name suffix"),
                        Map.entry("displayName", "Suffix")
                    )),
                    Map.entry("type", "String")
                ))
            ))
            .policyDefinitionName("ResourceNaming")
            .policyDefinitionVersion("1.2.1")
            .policyRule(Map.ofEntries(
                Map.entry("if", Map.of("not", Map.ofEntries(
                    Map.entry("field", "name"),
                    Map.entry("like", "[concat(parameters('prefix'), '*', parameters('suffix'))]")
                ))),
                Map.entry("then", Map.of("effect", "deny"))
            ))
            .version("1.2.1")
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const policyDefinitionVersionAtManagementGroup = new azure_native.authorization.PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroup", {
    description: "Force resource names to begin with given 'prefix' and/or end with given 'suffix'",
    displayName: "Enforce resource naming convention",
    managementGroupName: "MyManagementGroup",
    metadata: {
        category: "Naming",
    },
    mode: "All",
    parameters: {
        prefix: {
            metadata: {
                description: "Resource name prefix",
                displayName: "Prefix",
            },
            type: azure_native.authorization.ParameterType.String,
        },
        suffix: {
            metadata: {
                description: "Resource name suffix",
                displayName: "Suffix",
            },
            type: azure_native.authorization.ParameterType.String,
        },
    },
    policyDefinitionName: "ResourceNaming",
    policyDefinitionVersion: "1.2.1",
    policyRule: {
        "if": {
            not: {
                field: "name",
                like: "[concat(parameters('prefix'), '*', parameters('suffix'))]",
            },
        },
        then: {
            effect: "deny",
        },
    },
    version: "1.2.1",
});
Copy
import pulumi
import pulumi_azure_native as azure_native

policy_definition_version_at_management_group = azure_native.authorization.PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroup",
    description="Force resource names to begin with given 'prefix' and/or end with given 'suffix'",
    display_name="Enforce resource naming convention",
    management_group_name="MyManagementGroup",
    metadata={
        "category": "Naming",
    },
    mode="All",
    parameters={
        "prefix": {
            "metadata": {
                "description": "Resource name prefix",
                "display_name": "Prefix",
            },
            "type": azure_native.authorization.ParameterType.STRING,
        },
        "suffix": {
            "metadata": {
                "description": "Resource name suffix",
                "display_name": "Suffix",
            },
            "type": azure_native.authorization.ParameterType.STRING,
        },
    },
    policy_definition_name="ResourceNaming",
    policy_definition_version="1.2.1",
    policy_rule={
        "if": {
            "not": {
                "field": "name",
                "like": "[concat(parameters('prefix'), '*', parameters('suffix'))]",
            },
        },
        "then": {
            "effect": "deny",
        },
    },
    version="1.2.1")
Copy
resources:
  policyDefinitionVersionAtManagementGroup:
    type: azure-native:authorization:PolicyDefinitionVersionAtManagementGroup
    properties:
      description: Force resource names to begin with given 'prefix' and/or end with given 'suffix'
      displayName: Enforce resource naming convention
      managementGroupName: MyManagementGroup
      metadata:
        category: Naming
      mode: All
      parameters:
        prefix:
          metadata:
            description: Resource name prefix
            displayName: Prefix
          type: String
        suffix:
          metadata:
            description: Resource name suffix
            displayName: Suffix
          type: String
      policyDefinitionName: ResourceNaming
      policyDefinitionVersion: 1.2.1
      policyRule:
        if:
          not:
            field: name
            like: '[concat(parameters(''prefix''), ''*'', parameters(''suffix''))]'
        then:
          effect: deny
      version: 1.2.1
Copy

Create PolicyDefinitionVersionAtManagementGroup Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new PolicyDefinitionVersionAtManagementGroup(name: string, args: PolicyDefinitionVersionAtManagementGroupArgs, opts?: CustomResourceOptions);
@overload
def PolicyDefinitionVersionAtManagementGroup(resource_name: str,
                                             args: PolicyDefinitionVersionAtManagementGroupArgs,
                                             opts: Optional[ResourceOptions] = None)

@overload
def PolicyDefinitionVersionAtManagementGroup(resource_name: str,
                                             opts: Optional[ResourceOptions] = None,
                                             management_group_name: Optional[str] = None,
                                             policy_definition_name: Optional[str] = None,
                                             description: Optional[str] = None,
                                             display_name: Optional[str] = None,
                                             metadata: Optional[Any] = None,
                                             mode: Optional[str] = None,
                                             parameters: Optional[Mapping[str, ParameterDefinitionsValueArgs]] = None,
                                             policy_definition_version: Optional[str] = None,
                                             policy_rule: Optional[Any] = None,
                                             policy_type: Optional[Union[str, PolicyType]] = None,
                                             version: Optional[str] = None)
func NewPolicyDefinitionVersionAtManagementGroup(ctx *Context, name string, args PolicyDefinitionVersionAtManagementGroupArgs, opts ...ResourceOption) (*PolicyDefinitionVersionAtManagementGroup, error)
public PolicyDefinitionVersionAtManagementGroup(string name, PolicyDefinitionVersionAtManagementGroupArgs args, CustomResourceOptions? opts = null)
public PolicyDefinitionVersionAtManagementGroup(String name, PolicyDefinitionVersionAtManagementGroupArgs args)
public PolicyDefinitionVersionAtManagementGroup(String name, PolicyDefinitionVersionAtManagementGroupArgs args, CustomResourceOptions options)

type: azure-native:authorization:PolicyDefinitionVersionAtManagementGroup
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. PolicyDefinitionVersionAtManagementGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. PolicyDefinitionVersionAtManagementGroupArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. PolicyDefinitionVersionAtManagementGroupArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. PolicyDefinitionVersionAtManagementGroupArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. PolicyDefinitionVersionAtManagementGroupArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var policyDefinitionVersionAtManagementGroupResource = new AzureNative.Authorization.PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroupResource", new()
{
    ManagementGroupName = "string",
    PolicyDefinitionName = "string",
    Description = "string",
    DisplayName = "string",
    Metadata = "any",
    Mode = "string",
    Parameters = 
    {
        { "string", 
        {
            { "allowedValues", new[]
            {
                "any",
            } },
            { "defaultValue", "any" },
            { "metadata", 
            {
                { "assignPermissions", false },
                { "description", "string" },
                { "displayName", "string" },
                { "strongType", "string" },
            } },
            { "schema", "any" },
            { "type", "string" },
        } },
    },
    PolicyDefinitionVersion = "string",
    PolicyRule = "any",
    PolicyType = "string",
    Version = "string",
});
Copy
example, err := authorization.NewPolicyDefinitionVersionAtManagementGroup(ctx, "policyDefinitionVersionAtManagementGroupResource", &authorization.PolicyDefinitionVersionAtManagementGroupArgs{
	ManagementGroupName:  "string",
	PolicyDefinitionName: "string",
	Description:          "string",
	DisplayName:          "string",
	Metadata:             "any",
	Mode:                 "string",
	Parameters: map[string]interface{}{
		"string": map[string]interface{}{
			"allowedValues": []string{
				"any",
			},
			"defaultValue": "any",
			"metadata": map[string]interface{}{
				"assignPermissions": false,
				"description":       "string",
				"displayName":       "string",
				"strongType":        "string",
			},
			"schema": "any",
			"type":   "string",
		},
	},
	PolicyDefinitionVersion: "string",
	PolicyRule:              "any",
	PolicyType:              "string",
	Version:                 "string",
})
Copy
var policyDefinitionVersionAtManagementGroupResource = new PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroupResource", PolicyDefinitionVersionAtManagementGroupArgs.builder()
    .managementGroupName("string")
    .policyDefinitionName("string")
    .description("string")
    .displayName("string")
    .metadata("any")
    .mode("string")
    .parameters(%!v(PANIC=Format method: runtime error: invalid memory address or nil pointer dereference))
    .policyDefinitionVersion("string")
    .policyRule("any")
    .policyType("string")
    .version("string")
    .build());
Copy
policy_definition_version_at_management_group_resource = azure_native.authorization.PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroupResource",
    management_group_name=string,
    policy_definition_name=string,
    description=string,
    display_name=string,
    metadata=any,
    mode=string,
    parameters={
        string: {
            allowedValues: [any],
            defaultValue: any,
            metadata: {
                assignPermissions: False,
                description: string,
                displayName: string,
                strongType: string,
            },
            schema: any,
            type: string,
        },
    },
    policy_definition_version=string,
    policy_rule=any,
    policy_type=string,
    version=string)
Copy
const policyDefinitionVersionAtManagementGroupResource = new azure_native.authorization.PolicyDefinitionVersionAtManagementGroup("policyDefinitionVersionAtManagementGroupResource", {
    managementGroupName: "string",
    policyDefinitionName: "string",
    description: "string",
    displayName: "string",
    metadata: "any",
    mode: "string",
    parameters: {
        string: {
            allowedValues: ["any"],
            defaultValue: "any",
            metadata: {
                assignPermissions: false,
                description: "string",
                displayName: "string",
                strongType: "string",
            },
            schema: "any",
            type: "string",
        },
    },
    policyDefinitionVersion: "string",
    policyRule: "any",
    policyType: "string",
    version: "string",
});
Copy
type: azure-native:authorization:PolicyDefinitionVersionAtManagementGroup
properties:
    description: string
    displayName: string
    managementGroupName: string
    metadata: any
    mode: string
    parameters:
        string:
            allowedValues:
                - any
            defaultValue: any
            metadata:
                assignPermissions: false
                description: string
                displayName: string
                strongType: string
            schema: any
            type: string
    policyDefinitionName: string
    policyDefinitionVersion: string
    policyRule: any
    policyType: string
    version: string
Copy

PolicyDefinitionVersionAtManagementGroup Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The PolicyDefinitionVersionAtManagementGroup resource accepts the following input properties:

ManagementGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the management group. The name is case insensitive.
PolicyDefinitionName
This property is required.
Changes to this property will trigger replacement.
string
The name of the policy definition.
Description string
The policy definition description.
DisplayName string
The display name of the policy definition.
Metadata object
The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs.
Mode string
The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
Parameters Dictionary<string, Pulumi.AzureNative.Authorization.Inputs.ParameterDefinitionsValueArgs>
The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
PolicyDefinitionVersion Changes to this property will trigger replacement. string
The policy definition version. The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
PolicyRule object
The policy rule.
PolicyType string | Pulumi.AzureNative.Authorization.PolicyType
The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
Version string
The policy definition version in #.#.# format.
ManagementGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the management group. The name is case insensitive.
PolicyDefinitionName
This property is required.
Changes to this property will trigger replacement.
string
The name of the policy definition.
Description string
The policy definition description.
DisplayName string
The display name of the policy definition.
Metadata interface{}
The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs.
Mode string
The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
Parameters map[string]ParameterDefinitionsValueArgs
The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
PolicyDefinitionVersion Changes to this property will trigger replacement. string
The policy definition version. The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
PolicyRule interface{}
The policy rule.
PolicyType string | PolicyType
The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
Version string
The policy definition version in #.#.# format.
managementGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the management group. The name is case insensitive.
policyDefinitionName
This property is required.
Changes to this property will trigger replacement.
String
The name of the policy definition.
description String
The policy definition description.
displayName String
The display name of the policy definition.
metadata Object
The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs.
mode String
The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
parameters Map<String,ParameterDefinitionsValueArgs>
The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
policyDefinitionVersion Changes to this property will trigger replacement. String
The policy definition version. The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
policyRule Object
The policy rule.
policyType String | PolicyType
The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
version String
The policy definition version in #.#.# format.
managementGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the management group. The name is case insensitive.
policyDefinitionName
This property is required.
Changes to this property will trigger replacement.
string
The name of the policy definition.
description string
The policy definition description.
displayName string
The display name of the policy definition.
metadata any
The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs.
mode string
The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
parameters {[key: string]: ParameterDefinitionsValueArgs}
The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
policyDefinitionVersion Changes to this property will trigger replacement. string
The policy definition version. The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
policyRule any
The policy rule.
policyType string | PolicyType
The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
version string
The policy definition version in #.#.# format.
management_group_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the management group. The name is case insensitive.
policy_definition_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the policy definition.
description str
The policy definition description.
display_name str
The display name of the policy definition.
metadata Any
The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs.
mode str
The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
parameters Mapping[str, ParameterDefinitionsValueArgs]
The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
policy_definition_version Changes to this property will trigger replacement. str
The policy definition version. The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
policy_rule Any
The policy rule.
policy_type str | PolicyType
The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
version str
The policy definition version in #.#.# format.
managementGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the management group. The name is case insensitive.
policyDefinitionName
This property is required.
Changes to this property will trigger replacement.
String
The name of the policy definition.
description String
The policy definition description.
displayName String
The display name of the policy definition.
metadata Any
The policy definition metadata. Metadata is an open ended object and is typically a collection of key value pairs.
mode String
The policy definition mode. Some examples are All, Indexed, Microsoft.KeyVault.Data.
parameters Map<Property Map>
The parameter definitions for parameters used in the policy rule. The keys are the parameter names.
policyDefinitionVersion Changes to this property will trigger replacement. String
The policy definition version. The format is x.y.z where x is the major version number, y is the minor version number, and z is the patch number
policyRule Any
The policy rule.
policyType String | "NotSpecified" | "BuiltIn" | "Custom" | "Static"
The type of policy definition. Possible values are NotSpecified, BuiltIn, Custom, and Static.
version String
The policy definition version in #.#.# format.

Outputs

All input properties are implicitly available as output properties. Additionally, the PolicyDefinitionVersionAtManagementGroup resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Name string
The name of the policy definition version.
SystemData Pulumi.AzureNative.Authorization.Outputs.SystemDataResponse
The system metadata relating to this resource.
Type string
The type of the resource (Microsoft.Authorization/policyDefinitions/versions).
Id string
The provider-assigned unique ID for this managed resource.
Name string
The name of the policy definition version.
SystemData SystemDataResponse
The system metadata relating to this resource.
Type string
The type of the resource (Microsoft.Authorization/policyDefinitions/versions).
id String
The provider-assigned unique ID for this managed resource.
name String
The name of the policy definition version.
systemData SystemDataResponse
The system metadata relating to this resource.
type String
The type of the resource (Microsoft.Authorization/policyDefinitions/versions).
id string
The provider-assigned unique ID for this managed resource.
name string
The name of the policy definition version.
systemData SystemDataResponse
The system metadata relating to this resource.
type string
The type of the resource (Microsoft.Authorization/policyDefinitions/versions).
id str
The provider-assigned unique ID for this managed resource.
name str
The name of the policy definition version.
system_data SystemDataResponse
The system metadata relating to this resource.
type str
The type of the resource (Microsoft.Authorization/policyDefinitions/versions).
id String
The provider-assigned unique ID for this managed resource.
name String
The name of the policy definition version.
systemData Property Map
The system metadata relating to this resource.
type String
The type of the resource (Microsoft.Authorization/policyDefinitions/versions).

Supporting Types

ParameterDefinitionsValue
, ParameterDefinitionsValueArgs

AllowedValues List<object>
The allowed values for the parameter.
DefaultValue object
The default value for the parameter if no value is provided.
Metadata Pulumi.AzureNative.Authorization.Inputs.ParameterDefinitionsValueMetadata
General metadata for the parameter.
Schema object
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
Type string | Pulumi.AzureNative.Authorization.ParameterType
The data type of the parameter.
AllowedValues []interface{}
The allowed values for the parameter.
DefaultValue interface{}
The default value for the parameter if no value is provided.
Metadata ParameterDefinitionsValueMetadata
General metadata for the parameter.
Schema interface{}
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
Type string | ParameterType
The data type of the parameter.
allowedValues List<Object>
The allowed values for the parameter.
defaultValue Object
The default value for the parameter if no value is provided.
metadata ParameterDefinitionsValueMetadata
General metadata for the parameter.
schema Object
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type String | ParameterType
The data type of the parameter.
allowedValues any[]
The allowed values for the parameter.
defaultValue any
The default value for the parameter if no value is provided.
metadata ParameterDefinitionsValueMetadata
General metadata for the parameter.
schema any
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type string | ParameterType
The data type of the parameter.
allowed_values Sequence[Any]
The allowed values for the parameter.
default_value Any
The default value for the parameter if no value is provided.
metadata ParameterDefinitionsValueMetadata
General metadata for the parameter.
schema Any
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type str | ParameterType
The data type of the parameter.
allowedValues List<Any>
The allowed values for the parameter.
defaultValue Any
The default value for the parameter if no value is provided.
metadata Property Map
General metadata for the parameter.
schema Any
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type String | "String" | "Array" | "Object" | "Boolean" | "Integer" | "Float" | "DateTime"
The data type of the parameter.

ParameterDefinitionsValueMetadata
, ParameterDefinitionsValueMetadataArgs

AssignPermissions bool
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
Description string
The description of the parameter.
DisplayName string
The display name for the parameter.
StrongType string
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
AssignPermissions bool
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
Description string
The description of the parameter.
DisplayName string
The display name for the parameter.
StrongType string
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assignPermissions Boolean
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description String
The description of the parameter.
displayName String
The display name for the parameter.
strongType String
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assignPermissions boolean
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description string
The description of the parameter.
displayName string
The display name for the parameter.
strongType string
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assign_permissions bool
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description str
The description of the parameter.
display_name str
The display name for the parameter.
strong_type str
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assignPermissions Boolean
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description String
The description of the parameter.
displayName String
The display name for the parameter.
strongType String
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.

ParameterDefinitionsValueResponse
, ParameterDefinitionsValueResponseArgs

AllowedValues List<object>
The allowed values for the parameter.
DefaultValue object
The default value for the parameter if no value is provided.
Metadata Pulumi.AzureNative.Authorization.Inputs.ParameterDefinitionsValueResponseMetadata
General metadata for the parameter.
Schema object
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
Type string
The data type of the parameter.
AllowedValues []interface{}
The allowed values for the parameter.
DefaultValue interface{}
The default value for the parameter if no value is provided.
Metadata ParameterDefinitionsValueResponseMetadata
General metadata for the parameter.
Schema interface{}
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
Type string
The data type of the parameter.
allowedValues List<Object>
The allowed values for the parameter.
defaultValue Object
The default value for the parameter if no value is provided.
metadata ParameterDefinitionsValueResponseMetadata
General metadata for the parameter.
schema Object
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type String
The data type of the parameter.
allowedValues any[]
The allowed values for the parameter.
defaultValue any
The default value for the parameter if no value is provided.
metadata ParameterDefinitionsValueResponseMetadata
General metadata for the parameter.
schema any
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type string
The data type of the parameter.
allowed_values Sequence[Any]
The allowed values for the parameter.
default_value Any
The default value for the parameter if no value is provided.
metadata ParameterDefinitionsValueResponseMetadata
General metadata for the parameter.
schema Any
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type str
The data type of the parameter.
allowedValues List<Any>
The allowed values for the parameter.
defaultValue Any
The default value for the parameter if no value is provided.
metadata Property Map
General metadata for the parameter.
schema Any
Provides validation of parameter inputs during assignment using a self-defined JSON schema. This property is only supported for object-type parameters and follows the Json.NET Schema 2019-09 implementation. You can learn more about using schemas at https://json-schema.org/ and test draft schemas at https://www.jsonschemavalidator.net/.
type String
The data type of the parameter.

ParameterDefinitionsValueResponseMetadata
, ParameterDefinitionsValueResponseMetadataArgs

AssignPermissions bool
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
Description string
The description of the parameter.
DisplayName string
The display name for the parameter.
StrongType string
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
AssignPermissions bool
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
Description string
The description of the parameter.
DisplayName string
The display name for the parameter.
StrongType string
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assignPermissions Boolean
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description String
The description of the parameter.
displayName String
The display name for the parameter.
strongType String
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assignPermissions boolean
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description string
The description of the parameter.
displayName string
The display name for the parameter.
strongType string
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assign_permissions bool
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description str
The description of the parameter.
display_name str
The display name for the parameter.
strong_type str
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.
assignPermissions Boolean
Set to true to have Azure portal create role assignments on the resource ID or resource scope value of this parameter during policy assignment. This property is useful in case you wish to assign permissions outside the assignment scope.
description String
The description of the parameter.
displayName String
The display name for the parameter.
strongType String
Used when assigning the policy definition through the portal. Provides a context aware list of values for the user to choose from.

ParameterType
, ParameterTypeArgs

String
String
Array
Array
Object
Object
Boolean
Boolean
Integer
Integer
Float
Float
DateTime
DateTime
ParameterTypeString
String
ParameterTypeArray
Array
ParameterTypeObject
Object
ParameterTypeBoolean
Boolean
ParameterTypeInteger
Integer
ParameterTypeFloat
Float
ParameterTypeDateTime
DateTime
String
String
Array
Array
Object
Object
Boolean
Boolean
Integer
Integer
Float
Float
DateTime
DateTime
String
String
Array
Array
Object
Object
Boolean
Boolean
Integer
Integer
Float
Float
DateTime
DateTime
STRING
String
ARRAY
Array
OBJECT
Object
BOOLEAN
Boolean
INTEGER
Integer
FLOAT
Float
DATE_TIME
DateTime
"String"
String
"Array"
Array
"Object"
Object
"Boolean"
Boolean
"Integer"
Integer
"Float"
Float
"DateTime"
DateTime

PolicyType
, PolicyTypeArgs

NotSpecified
NotSpecified
BuiltIn
BuiltIn
Custom
Custom
Static
Static
PolicyTypeNotSpecified
NotSpecified
PolicyTypeBuiltIn
BuiltIn
PolicyTypeCustom
Custom
PolicyTypeStatic
Static
NotSpecified
NotSpecified
BuiltIn
BuiltIn
Custom
Custom
Static
Static
NotSpecified
NotSpecified
BuiltIn
BuiltIn
Custom
Custom
Static
Static
NOT_SPECIFIED
NotSpecified
BUILT_IN
BuiltIn
CUSTOM
Custom
STATIC
Static
"NotSpecified"
NotSpecified
"BuiltIn"
BuiltIn
"Custom"
Custom
"Static"
Static

SystemDataResponse
, SystemDataResponseArgs

CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.
createdAt string
The timestamp of resource creation (UTC).
createdBy string
The identity that created the resource.
createdByType string
The type of identity that created the resource.
lastModifiedAt string
The timestamp of resource last modification (UTC)
lastModifiedBy string
The identity that last modified the resource.
lastModifiedByType string
The type of identity that last modified the resource.
created_at str
The timestamp of resource creation (UTC).
created_by str
The identity that created the resource.
created_by_type str
The type of identity that created the resource.
last_modified_at str
The timestamp of resource last modification (UTC)
last_modified_by str
The identity that last modified the resource.
last_modified_by_type str
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:authorization:PolicyDefinitionVersionAtManagementGroup 1.2.1 /providers/Microsoft.Management/managementGroups/{managementGroupName}/providers/Microsoft.Authorization/policyDefinitions/{policyDefinitionName}/versions/{policyDefinitionVersion}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
azure-native-v2 pulumi/pulumi-azure-native
License
Apache-2.0
These are the docs for Azure Native v2. We recommenend using the latest version, Azure Native v3.
Azure Native v2 v2.90.0 published on Thursday, Mar 27, 2025 by Pulumi
pulumi/pulumi-azure-native