DenySettings Class

Reference

Definition

Namespace:: Microsoft.Azure.Management.Resources.Models

Assembly:: Microsoft.Azure.PowerShell.Resources.Management.Sdk.dll

Important

Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.

Defines how resources deployed by the Deployment stack are locked.

public class DenySettings

type DenySettings = class

Public Class DenySettings

Inheritance: Object
DenySettings

Constructors

DenySettings()	Initializes a new instance of the DenySettings class.
DenySettings(String, IList<String>, IList<String>, Nullable<Boolean>)	Initializes a new instance of the DenySettings class.

Properties

ApplyToChildScopes	Gets or sets denySettings will be applied to child resource scopes of every managed resource with a deny assignment.
ExcludedActions	Gets or sets list of role-based management operations that are excluded from the denySettings. Up to 200 actions are permitted. If the denySetting mode is set to 'denyWriteAndDelete', then the following actions are automatically appended to 'excludedActions': '*/read' and 'Microsoft.Authorization/locks/delete'. If the denySetting mode is set to 'denyDelete', then the following actions are automatically appended to 'excludedActions': 'Microsoft.Authorization/locks/delete'. Duplicate actions will be removed.
ExcludedPrincipals	Gets or sets list of AAD principal IDs excluded from the lock. Up to 5 principals are permitted.
Mode	Gets or sets denySettings Mode that defines denied actions. Possible values include: 'denyDelete', 'denyWriteAndDelete', 'none'

Methods

Validate()

Validate the object.

Applies to

Share via