Exposing membershipTypes in accessReviewInstanceDecisionItem

Azure · Dec 1, 2021 · 8f3eba7 · 8f3eba7
1 parent e564ab4
commit 8f3eba7
Show file tree

Hide file tree

Showing 4 changed files with 46 additions and 0 deletions.
diff --git a/...r/Microsoft.Authorization/preview/2021-12-01-preview/authorization-AccessReviewCalls.json b/...r/Microsoft.Authorization/preview/2021-12-01-preview/authorization-AccessReviewCalls.json
@@ -1842,6 +1842,13 @@
             "$ref": "#/definitions/AccessReviewDecisionInsight"
           },
           "description": "This is the collection of insights for this decision item."
+        },
+        "principalResourceMembership": {
+          "readOnly": true,
+          "x-ms-client-flatten": true,
+          "$ref": "#/definitions/AccessReviewDecisionPrincipalResourceMembership",
+          "description": "Details of the membership type.",
+          "x-nullable": true
         }
       },
       "description": "Approval Step."
@@ -1984,6 +1991,27 @@
       },
       "description": "Record All Decisions payload."
     },
+    "AccessReviewDecisionPrincipalResourceMembership": {
+      "type": "object",
+      "properties": {
+        "membershipTypes": {
+          "type": "array",
+          "description": "Every decision item in an access review represents a principal's membership to a resource. This property represents details of the membership. Examples of this detail might be whether the principal has direct access or indirect access",
+          "items": {
+            "type": "string",
+            "enum": [
+              "direct",
+              "indirect"
+            ],
+            "x-ms-enum": {
+              "name": "AccessReviewDecisionPrincipalResourceMembershipType",
+              "modelAsString": true
+            }
+          }
+        }
+      },
+      "description": "Target of the decision."
+    },
     "AccessReviewDecisionIdentity": {
       "type": "object",
       "discriminator": "type",

diff --git a/...t.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceDecisions.json b/...t.Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceDecisions.json
@@ -42,6 +42,12 @@
                 "type": "azureRole",
                 "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",
                 "displayName": "Owner"
+              },
+              "principalResourceMembership": {
+                "membershipTypes": [
+                  "direct",
+                  "indirect"
+                ]
               }
             }
           }

diff --git a/...horization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisionById.json b/...horization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisionById.json
@@ -40,6 +40,12 @@
             "type": "azureRole",
             "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",
             "displayName": "Owner"
+          },
+          "principalResourceMembership": {
+            "membershipTypes": [
+              "direct",
+              "indirect"
+            ]
           }
         }
       }

diff --git a/...Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisions.json b/...Authorization/preview/2021-12-01-preview/examples/GetAccessReviewInstanceMyDecisions.json
@@ -41,6 +41,12 @@
                 "type": "azureRole",
                 "id": "a6c7aecb-cbfd-4763-87ef-e91b4bd509d9",
                 "displayName": "Owner"
+              },
+              "principalResourceMembership": {
+                "membershipTypes": [
+                  "direct",
+                  "indirect"
+                ]
               }
             }
           }