clientId | string | Required | ClientId (application id) of the user-assigned managed identity used for Workload Identity Federation. |
name | string | Required, Identifier | Service connection name |
organization | string | Required, Identifier | Azure DevOps organization name (e.g. 'myorg') or full https://dev.azure.com/{org} URL |
project | string | Required, Identifier | Project name that will contain the service connection |
tenantId | string | Required | Azure AD tenant id (directory id) containing the user-assigned managed identity. |
authorizationScheme | string | Read-only | [OUTPUT] Authorization scheme actually used |
description | string | | Description for the service connection |
grantAllPipelines | bool | | Grant access permission to all pipelines (authorizes all pipelines after creation) |
issuer | string | Read-only | [OUTPUT] Workload Identity Federation Issuer |
managementGroupId | string | | Management group id. Required when scopeLevel = ManagementGroup. |
managementGroupName | string | | Management group name. Required when scopeLevel = ManagementGroup. |
scopeLevel | 'Subscription' | 'ManagementGroup' | | Scope level: Subscription (default) or ManagementGroup. |
serviceConnectionId | string | Read-only | [OUTPUT]Service connection id (GUID) |
subjectIdentifier | string | Read-only | [OUTPUT] Workload Identity Federation Subject Identifier |
subscriptionId | string | | Azure subscription id (GUID). Required when scopeLevel = Subscription. |
subscriptionName | string | | Azure subscription display name. Required when scopeLevel = Subscription. |
url | string | Read-only | [OUTPUT] Service connection URL |