From 2cc4506c91053a232e3581cc4891e3d76743406b Mon Sep 17 00:00:00 2001
From: Shubham Gupta <shugup@microsoft.com>
Date: Wed, 29 Jun 2022 17:12:40 -0700
Subject: [PATCH] Exposing membershipTypes in accessReviewInstanceDecisionItem

---
 .../authorization-AccessReviewCalls.json      | 28 +++++++++++++++++++
 .../GetAccessReviewInstanceDecisions.json     |  6 ++++
 ...GetAccessReviewInstanceMyDecisionById.json |  6 ++++
 .../GetAccessReviewInstanceMyDecisions.json   |  6 ++++
 4 files changed, 46 insertions(+)

diff --git a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/authorization-AccessReviewCalls.json b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/authorization-AccessReviewCalls.json
index 61c7df29d04a..ebdd703c8512 100644
--- a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/authorization-AccessReviewCalls.json
+++ b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/authorization-AccessReviewCalls.json
@@ -3299,6 +3299,13 @@
             "$ref": "#/definitions/AccessReviewDecisionInsight"
           },
           "description": "This is the collection of insights for this decision item."
+        },
+        "principalResourceMembership": {
+          "readOnly": true,
+          "x-ms-client-flatten": true,
+          "$ref": "#/definitions/AccessReviewDecisionPrincipalResourceMembership",
+          "description": "Details of the membership type.",
+          "x-nullable": true
         }
       },
       "description": "Approval Step."
@@ -3441,6 +3448,27 @@
       },
       "description": "Record All Decisions payload."
     },
+    "AccessReviewDecisionPrincipalResourceMembership": {
+      "type": "object",
+      "properties": {
+        "membershipTypes": {
+          "type": "array",
+          "description": "Every decision item in an access review represents a principal's membership to a resource. This property represents details of the membership. Examples of this detail might be whether the principal has direct access or indirect access",
+          "items": {
+            "type": "string",
+            "enum": [
+              "direct",
+              "indirect"
+            ],
+            "x-ms-enum": {
+              "name": "AccessReviewDecisionPrincipalResourceMembershipType",
+              "modelAsString": true
+            }
+          }
+        }
+      },
+      "description": "Target of the decision."
+    },
     "AccessReviewDecisionIdentity": {
       "type": "object",
       "discriminator": "type",
diff --git a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceDecisions.json b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceDecisions.json
index ed01bfd0dda3..bc7e4e861366 100644
--- a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceDecisions.json
+++ b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceDecisions.json
@@ -42,6 +42,12 @@
                 "type": "azureRole",
                 "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",
                 "displayName": "Owner"
+              },
+              "principalResourceMembership": {
+                "membershipTypes": [
+                  "direct",
+                  "indirect"
+                ]
               }
             }
           }
diff --git a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisionById.json b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisionById.json
index 85b67899caa3..f22a13ab6ac5 100644
--- a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisionById.json
+++ b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisionById.json
@@ -40,6 +40,12 @@
             "type": "azureRole",
             "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",
             "displayName": "Owner"
+          },
+          "principalResourceMembership": {
+            "membershipTypes": [
+              "direct",
+              "indirect"
+            ]
           }
         }
       }
diff --git a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisions.json b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisions.json
index a4376a4e283e..ac03f3692691 100644
--- a/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisions.json
+++ b/specification/authorization/resource-manager/Microsoft.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisions.json
@@ -41,6 +41,12 @@
                 "type": "azureRole",
                 "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",
                 "displayName": "Owner"
+              },
+              "principalResourceMembership": {
+                "membershipTypes": [
+                  "direct",
+                  "indirect"
+                ]
               }
             }
           }