Active Directory Unified Role Assignment Schedule Instance

Docs > DDSQL Reference > Data Directory > Active Directory Unified Role Assignment Schedule Instance

This table represents the Active Directory Unified Role Assignment Schedule Instance resource from Microsoft Azure.

azure.ad_unified_role_assignment_schedule_instance

Fields

ID	Type	Data Type	Description
_key	core	string
activated_using	core	json	If the request is from an eligible administrator to activate a role, this parameter shows the related eligible assignment for that activation. Otherwise, it's null. Supports $expand and $select nested in $expand.
app_scope	core	json	Read-only property with details of the app-specific scope when the assignment or role eligibility is scoped to an app. Nullable.
app_scope_id	core	string	Identifier of the app-specific scope when the assignment or role eligibility is scoped to an app. The scope of an assignment or role eligibility determines the set of resources for which the principal has been granted access. App scopes are scopes that are defined and understood by this application only. Use / for tenant-wide app scopes. Use directoryScopeId to limit the scope to particular directory objects, for example, administrative units.
assignment_type	core	string	The type of the assignment that can either be Assigned or Activated. Supports $filter (eq, ne).
directory_scope	core	json	The directory object that is the scope of the assignment or role eligibility. Read-only.
directory_scope_id	core	string	Identifier of the directory object representing the scope of the assignment or role eligibility. The scope of an assignment or role eligibility determines the set of resources for which the principal has been granted access. Directory scopes are shared scopes stored in the directory that are understood by multiple applications. Use / for tenant-wide scope. Use appScopeId to limit the scope to an application only.
end_date_time	core	string	The end date of the schedule instance.
id	core	string	The unique identifier for an entity. Read-only.
member_type	core	string	How the assignment is inherited. It can either be Inherited, Direct, or Group. It can further imply whether the unifiedRoleAssignmentSchedule can be managed by the caller. Supports $filter (eq, ne).
name	core	string
principal	core	json	The principal that's getting a role assignment or role eligibility through the request.
principal_id	core	string	Identifier of the principal that has been granted the role assignment or that's eligible for a role.
resource_group	core	string
role_assignment_origin_id	core	string	The identifier of the role assignment in Microsoft Entra. Supports $filter (eq, ne).
role_assignment_schedule_id	core	string	The identifier of the unifiedRoleAssignmentSchedule object from which this instance was created. Supports $filter (eq, ne).
role_definition	core	json	Detailed information for the roleDefinition object that is referenced through the roleDefinitionId property.
role_definition_id	core	string	Identifier of the unifiedRoleDefinition object that is being assigned to the principal or that the principal is eligible for.
start_date_time	core	string	When this instance starts.
subscription_id	core	string
subscription_name	core	string
tags	core	hstore