az blueprint assignment
Commands to manage blueprint assignment.
Commands
| az blueprint assignment create |
Create a blueprint assignment. |
| az blueprint assignment delete |
Delete a blueprint assignment. |
| az blueprint assignment list |
List blueprint assignments within a subscription. |
| az blueprint assignment show |
Get a blueprint assignment. |
| az blueprint assignment update |
Update a blueprint assignment. |
| az blueprint assignment wait |
Place the CLI in a waiting state until a condition of the Blueprint Assignment is met. |
| az blueprint assignment who |
Get Blueprint Servie Principal Name objectId. |
az blueprint assignment create
Create a blueprint assignment.
az blueprint assignment create --name
[--blueprint-version]
[--description]
[--display-name]
[--identity-type {None, SystemAssigned, UserAssigned}]
[--location]
[--locks-excluded-principals]
[--locks-mode {AllResourcesDoNotDelete, AllResourcesReadOnly, None}]
[--management-group]
[--parameters]
[--principal-id]
[--resource-group-value]
[--subscription]
[--tenant-id]
[--user-assigned-identities]Examples
Assignment with system-assigned managed identity
az blueprint assignment create --subscription MySubscription --name \
MyBlueprintAssignment --location eastus --identity-type SystemAssigned \
--description "Enforce pre-defined MyBlueprint to this subscription." \
--blueprint-version "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup/provid \
ers/Microsoft.Blueprint/blueprints/MyBlueprint/versions/v2" \
--resource-group-value artifact_name=rg-art-1 name=rg1 location=westus \
--resource-group-value artifact_name=rg-art-2 name=rg2 location=eastus \
--parameters "path/to/parameter/file" \Assignment with user-assigned managed identity
az blueprint assignment create --subscription MySubscription --name \
MyBlueprintAssignment --location eastus --identity-type UserAssigned \
--user-assigned-identities identity-id \
--description "Enforce pre-defined MyBlueprint to this subscription." \
--blueprint-version "/providers/Microsoft.Management/managementGroups/ContosoOnlineGroup \
/providers/Microsoft.Blueprint/blueprints/MyBlueprint/versions/v2" \
--resource-group-value artifact_name=rg-art-1 name=rg1 location=eastus \
--parameters "path/to/parameter/file" \Required Parameters
Name of the blueprint assignment.
Optional Parameters
Resource ID of the published version of a blueprint definition.
Multi-line explain this resource.
One-liner string explain this resource.
Type of the managed identity.
Location. Values from: az account list-locations. You can configure the default location using az configure --defaults location=<location>.
List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
Lock mode.
Use management group for the target scope of the blueprint assignment. It is reserved for future use. Use --subscription instead.
Blueprint assignment parameter values. It can be a JSON string or JSON file path.
Azure Active Directory principal ID associated with this Identity.
Key=Value pairs for a resource group. Keys include 'artifact_name'(required), 'name', 'location'.
Use subscription for the target scope of the blueprint assignment. Default susbcription will be used if option not specified.
ID of the Azure Active Directory.
The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az blueprint assignment delete
Delete a blueprint assignment.
az blueprint assignment delete --name
[--management-group]
[--subscription]
[--yes]Examples
Delete an assignment
az blueprint assignment delete --subscription MySubscription \
--name MyBlueprintAssignmentRequired Parameters
Name of the blueprint assignment.
Optional Parameters
Use management group for the target scope of the blueprint assignment. It is reserved for future use. Use --subscription instead.
Use subscription for the target scope of the blueprint assignment. Default susbcription will be used if option not specified.
Do not prompt for confirmation.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az blueprint assignment list
List blueprint assignments within a subscription.
az blueprint assignment list [--management-group]
[--subscription]Examples
List assignments
az blueprint assignment list --subscription MySubscriptionOptional Parameters
Use management group for the target scope of the blueprint assignment. It is reserved for future use. Use --subscription instead.
Use subscription for the target scope of the blueprint assignment. Default susbcription will be used if option not specified.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az blueprint assignment show
Get a blueprint assignment.
az blueprint assignment show --name
[--management-group]
[--subscription]Examples
Show an assignment
az blueprint assignment show --subscription MySubscription \
--name MyBlueprintAssignmentRequired Parameters
Name of the blueprint assignment.
Optional Parameters
Use management group for the target scope of the blueprint assignment. It is reserved for future use. Use --subscription instead.
Use subscription for the target scope of the blueprint assignment. Default susbcription will be used if option not specified.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az blueprint assignment update
Update a blueprint assignment.
az blueprint assignment update --name
[--blueprint-version]
[--description]
[--display-name]
[--identity-type {None, SystemAssigned, UserAssigned}]
[--location]
[--locks-excluded-principals]
[--locks-mode {AllResourcesDoNotDelete, AllResourcesReadOnly, None}]
[--management-group]
[--parameters]
[--principal-id]
[--resource-group-value]
[--subscription]
[--tenant-id]
[--user-assigned-identities]Required Parameters
Name of the blueprint assignment.
Optional Parameters
Resource ID of the published version of a blueprint definition.
Multi-line explain this resource.
One-liner string explain this resource.
Type of the managed identity.
Location. Values from: az account list-locations. You can configure the default location using az configure --defaults location=<location>.
List of AAD principals excluded from blueprint locks. Up to 5 principals are permitted.
Lock mode.
Use management group for the target scope of the blueprint assignment. It is reserved for future use. Use --subscription instead.
Blueprint assignment parameter values. It can be a JSON string or JSON file path.
Azure Active Directory principal ID associated with this Identity.
Key=Value pairs for a resource group. Keys include 'artifact_name'(required), 'name', 'location'.
Use subscription for the target scope of the blueprint assignment. Default susbcription will be used if option not specified.
ID of the Azure Active Directory.
The list of user-assigned managed identities associated with the resource. Key is the Azure resource Id of the managed identity.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az blueprint assignment wait
Place the CLI in a waiting state until a condition of the Blueprint Assignment is met.
az blueprint assignment wait --name
[--created]
[--custom]
[--deleted]
[--exists]
[--interval]
[--management-group]
[--subscription]
[--timeout]
[--updated]Examples
Pause executing next line of CLI script until the Blueprint Assignment is successfully provisioned.
az blueprint assignment wait --subscription MySubscription \ --name MyBlueprintAssignment --createdRequired Parameters
Name of the blueprint assignment.
Optional Parameters
Wait until created with 'provisioningState' at 'Succeeded'.
Wait until the condition satisfies a custom JMESPath query. E.g. provisioningState!='InProgress', instanceView.statuses[?code=='PowerState/running'].
Wait until deleted.
Wait until the resource exists.
Polling interval in seconds.
Use management group for the target scope of the blueprint assignment. It is reserved for future use. Use --subscription instead.
Use subscription for the target scope of the blueprint assignment. Default susbcription will be used if option not specified.
Maximum wait in seconds.
Wait until updated with provisioningState at 'Succeeded'.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.
az blueprint assignment who
Get Blueprint Servie Principal Name objectId.
az blueprint assignment who --name
[--management-group]
[--subscription]Examples
Get SPN objectId
az blueprint assignment who --subscription MySubscription \
--name MyBlueprintAssignmentRequired Parameters
Name of the blueprint assignment.
Optional Parameters
Use management group for the target scope of the blueprint assignment. It is reserved for future use. Use --subscription instead.
Use subscription for the target scope of the blueprint assignment. Default susbcription will be used if option not specified.
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Increase logging verbosity. Use --debug for full debug logs.