ManagedHsmRoleDefinition

Properties

Property	Type	Attributes	Description
name	string	Required, Identifier	The name of the role definition. Must be a GUID.
scope	string	Required, Identifier	The scope the role definition applies to, e.g. '/' or '/keys'.
assignableScopes	string[]		The scopes the role can be assigned at. Defaults to the role definition's own scope.
description	string		A description of the role.
id	string	Read-only	The fully qualified ID of the role definition.
managedHsmUri	string	Identifier	The URI of the Managed HSM. Defaults to the 'managedHsmUri' supplied in the extension configuration.
permissions	ManagedHsmPermission[]		The permissions granted by the role.
roleName	string		The display name of the role.
roleType	string	Read-only	The type of the role. Either 'AKVBuiltInRole' or 'CustomRole'.

ManagedHsmPermission

Property	Type	Attributes	Description
actions	string[]		Control plane actions allowed by the role.
dataActions	string[]		Data plane actions allowed by the role, e.g. 'Microsoft.KeyVault/managedHsm/keys/read/action'.
notActions	string[]		Control plane actions denied by the role.
notDataActions	string[]		Data plane actions denied by the role.