Role Assignment Schedule Instance

Docs > DDSQL Reference > Data Directory > Role Assignment Schedule Instance

Role Assignment Schedule Instance in Azure represents a specific occurrence of a role assignment that is governed by Privileged Identity Management (PIM). It defines when and how a role is active for a user or principal, including start and end times, scope, and eligibility. This resource helps manage just-in-time access and enforces least privilege by ensuring roles are only active when needed.

azure.authorization_role_assignment_schedule_instance

Fields

ID	Type	Data Type	Description
_key	core	string
assignment_type	core	string	Assignment type of the role assignment schedule
condition	core	string	The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'
condition_version	core	string	Version of the condition. Currently accepted value is '2.0'
created_on	core	string	DateTime when role assignment schedule was created
end_date_time	core	string	The endDateTime of the role assignment schedule instance
expanded_properties	core	json	Additional properties of principal, scope and role definition
id	core	string	The role assignment schedule instance ID.
linked_role_eligibility_schedule_id	core	string	roleEligibilityScheduleId used to activate
linked_role_eligibility_schedule_instance_id	core	string	roleEligibilityScheduleInstanceId linked to this roleAssignmentScheduleInstance
member_type	core	string	Membership type of the role assignment schedule
name	core	string	The role assignment schedule instance name.
origin_role_assignment_id	core	string	Role Assignment Id in external system
principal_id	core	string	The principal ID.
principal_type	core	string	The principal type of the assigned principal ID.
resource_group	core	string
role_assignment_schedule_id	core	string	Id of the master role assignment schedule
role_definition_id	core	string	The role definition ID.
scope	core	string	The role assignment schedule scope.
start_date_time	core	string	The startDateTime of the role assignment schedule instance
status	core	string	The status of the role assignment schedule instance.
subscription_id	core	string
subscription_name	core	string
tags	core	hstore
type	core	string	The role assignment schedule instance type.