Azure Resource Graph table and resource type reference

Azure Resource Graph supports the following resource types of Azure Resource Manager. Each resource type is part of a table in Resource Graph.

advisorresources

For sample queries for this table, see Resource Graph sample queries for advisorresources.

• microsoft.advisor/configurations
• microsoft.advisor/recommendations
  • Sample query: Get cost savings summary from Azure Advisor
  • Sample query: List Arc-enabled servers not running latest released agent version
• microsoft.advisor/suppressions

alertsmanagementresources

• microsoft.alertsmanagement/alerts

computeresources

• microsoft.compute/virtualmachinescalesets/virtualmachines/networkinterfaces/ipconfigurations/publicipaddresses

guestconfigurationresources

For sample queries for this table, see Resource Graph sample queries for guestconfigurationresources.

• microsoft.guestconfiguration/guestconfigurationassignments
  • Sample query: Count machines in scope of guest configuration policies
  • Sample query: Count of non-compliant guest configuration assignments
  • Sample query: Find all reasons a machine is non-compliant for guest configuration assignments

healthresources

For sample queries for this table, see Resource Graph sample queries for healthresources.

• microsoft.resourcehealth/availabilitystatuses
  • Sample query: Count of virtual machines by availability state and Subscription Id
  • Sample query: List of virtual machines and associated availability states by Resource Ids
  • Sample query: List of virtual machines by availability state and power state with Resource Ids and resource Groups
  • Sample query: List of virtual machines that are not Available by Resource Ids

kubernetesconfigurationresources

For sample queries for this table, see Resource Graph sample queries for kubernetesconfigurationresources.

• microsoft.kubernetesconfiguration/extensions
  • Sample query: List all Azure Arc-enabled Kubernetes clusters with Azure Monitor extension
  • Sample query: List all Azure Arc-enabled Kubernetes clusters without Azure Monitor extension
• microsoft.kubernetesconfiguration/fluxconfigurations
• microsoft.kubernetesconfiguration/sourcecontrolconfigurations

maintenanceresources

• microsoft.maintenance/applyupdates
• microsoft.maintenance/configurationassignments
• microsoft.maintenance/updates
• microsoft.resources/subscriptions (Subscriptions)
  • Sample query: Count of subscriptions per management group
  • Sample query: Key vaults with subscription name
  • Sample query: List all management group ancestors for a specified subscription
  • Sample query: List all subscriptions under a specified management group
  • Sample query: Remove columns from results
  • Sample query: Secure score per management group

patchassessmentresources

For sample queries for this table, see Resource Graph sample queries for patchassessmentresources.

• microsoft.compute/virtualmachines/patchassessmentresults
• microsoft.compute/virtualmachines/patchassessmentresults/softwarepatches
• microsoft.hybridcompute/machines/patchassessmentresults
• microsoft.hybridcompute/machines/patchassessmentresults/softwarepatches

patchinstallationresources

• microsoft.compute/virtualmachines/patchinstallationresults
• microsoft.compute/virtualmachines/patchinstallationresults/softwarepatches
• microsoft.hybridcompute/machines/patchinstallationresults
• microsoft.hybridcompute/machines/patchinstallationresults/softwarepatches

policyresources

For sample queries for this table, see Resource Graph sample queries for policyresources.

• microsoft.authorization/policyassignments
• microsoft.authorization/policydefinitions
• microsoft.authorization/policysetdefinitions
• microsoft.policyinsights/policystates
  • Sample query: Compliance by policy assignment
  • Sample query: Compliance by resource type
  • Sample query: List all non-compliant resources
  • Sample query: Summarize resource compliance by state
  • Sample query: Summarize resource compliance by state per location

recoveryservicesresources

• microsoft.dataprotection/backupvaults/backupinstances
• microsoft.dataprotection/backupvaults/backupjobs
• microsoft.dataprotection/backupvaults/backuppolicies
• microsoft.recoveryservices/vaults/alerts
• Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems (Backup Items)
• microsoft.recoveryservices/vaults/backupjobs
• microsoft.recoveryservices/vaults/backuppolicies

resourcecontainers

For sample queries for this table, see Resource Graph sample queries for resourcecontainers.

• microsoft.resources/subscriptions (Subscriptions)
  • Sample query: Count of subscriptions per management group
  • Sample query: Key vaults with subscription name
  • Sample query: List all management group ancestors for a specified subscription
  • Sample query: List all subscriptions under a specified management group
  • Sample query: Remove columns from results
  • Sample query: Secure score per management group

resources

For sample queries for this table, see Resource Graph sample queries for resources.

• Microsoft.AAD/domainServices (Azure AD Domain Services)
• microsoft.alertsmanagement/actionrules
• microsoft.alertsmanagement/resourcehealthalertrules
• microsoft.alertsmanagement/smartdetectoralertrules
• Microsoft.AnalysisServices/servers (Analysis Services)
• Microsoft.ApiManagement/service (API Management services)
• Microsoft.AppConfiguration/configurationStores (App Configuration)
• Microsoft.AppPlatform/Spring (Azure Spring Cloud)
• Microsoft.Attestation/attestationProviders (Attestation providers)
• Microsoft.Automation/AutomationAccounts (Automation Accounts)
• microsoft.automation/automationaccounts/configurations
• Microsoft.Automation/automationAccounts/runbooks (Runbook)
• microsoft.autonomousdevelopmentplatform/accounts
• Microsoft.AzureActiveDirectory/b2cDirectories (B2C Tenants)
• Microsoft.AzureActiveDirectory/guestUsages (Guest Usages)
• microsoft.azurestack/edgesubscriptions
• microsoft.azurestack/linkedsubscriptions
• Microsoft.Azurestack/registrations (Azure Stack Hubs)
• Microsoft.AzureStackHCI/clusters (Azure Stack HCI)
• Microsoft.Batch/batchAccounts (Batch accounts)
• Microsoft.BotService/botServices (Bot Services)
• Microsoft.Cache/Redis (Azure Cache for Redis)
• microsoft.cdn/profiles (CDN)
• microsoft.cdn/profiles/endpoints (Endpoints)
• Microsoft.CertificateRegistration/certificateOrders (App Service Certificates)
• microsoft.classicCompute/domainNames (Cloud services (classic))
• Microsoft.ClassicCompute/VirtualMachines (Virtual machines (classic))
• Microsoft.ClassicNetwork/networkSecurityGroups (Network security groups (classic))
• Microsoft.ClassicNetwork/reservedIps (Reserved IP addresses (classic))
• Microsoft.ClassicNetwork/virtualNetworks (Virtual networks (classic))
• Microsoft.CloudTest/hostedpools (1ES Hosted Pools)
• Microsoft.CloudTest/images (CloudTest Images)
• Microsoft.CognitiveServices/accounts (Cognitive Services)
• Microsoft.Compute/availabilitySets (Availability sets)
• Microsoft.Compute/capacityReservationGroups (Capacity Reservation Groups)
• microsoft.compute/capacityreservationgroups/capacityreservations
• Microsoft.Compute/VirtualMachines (Virtual machines)
  • Sample query: Count of virtual machines by power state
  • Sample query: Count virtual machines by OS type
  • Sample query: Count virtual machines by OS type with extend
  • Sample query: List all extensions installed on a virtual machine
  • Sample query: List machines that are not running and the last compliance status
  • Sample query: List of virtual machines by availability state and power state with Resource Ids and resource Groups
  • Sample query: List virtual machines with their network interface and public IP
  • Sample query: Show all virtual machines ordered by name in descending order
  • Sample query: Show first five virtual machines by name and their OS type
  • Sample query: Summarize virtual machine by the power states extended property
  • Sample query: Virtual machines matched by regex
• Microsoft.ConnectedVehicle/platformAccounts (Connected Vehicle Platforms)
• Microsoft.ContainerInstance/containerGroups (Container instances)
• Microsoft.ContainerRegistry/registries (Container registries)
• Microsoft.ContainerRegistry/registries/replications (Container registry replications)
• microsoft.containerregistry/registries/taskruns
• microsoft.containerregistry/registries/tasks
• Microsoft.ContainerRegistry/registries/webhooks (Container registry webhooks)
• Microsoft.ContainerService/managedClusters (Kubernetes services)
  • Sample query: List impacted resources when transferring an Azure subscription
• microsoft.contoso/clusters
• microsoft.contoso/employees
• microsoft.contoso/towers
• Microsoft.Dashboard/grafana (Grafana Workspaces)
• Microsoft.DataBox/jobs (Azure Data Box)
• Microsoft.Databricks/workspaces (Azure Databricks Services)
• Microsoft.DataFactory/factories (Data factories (V2))
• Microsoft.DataMigration/services (Azure Database Migration Services)
• Microsoft.DataMigration/services/projects (Azure Database Migration Projects)
• microsoft.datamigration/slots
• microsoft.datamigration/sqlmigrationservices (Azure Database Migration Services)
• Microsoft.DataProtection/BackupVaults (Backup vaults)
• Microsoft.DBforMariaDB/servers (Azure Database for MariaDB servers)
• Microsoft.DBforMySQL/flexibleServers (Azure Database for MySQL flexible servers)
• Microsoft.DBforMySQL/servers (Azure Database for MySQL servers)
• Microsoft.DBforPostgreSQL/flexibleServers (Azure Database for PostgreSQL flexible servers)
• Microsoft.DBforPostgreSQL/servers (Azure Database for PostgreSQL servers)
• Microsoft.DesktopVirtualization/ApplicationGroups (Application groups)
• Microsoft.DesktopVirtualization/HostPools (Host pools)
• Microsoft.DesktopVirtualization/ScalingPlans (Scaling plans)
• Microsoft.DesktopVirtualization/Workspaces (Workspaces)
• microsoft.devices/elasticpools
• microsoft.devices/elasticpools/iothubtenants
• Microsoft.Devices/IotHubs (IoT Hub)
• Microsoft.Devices/ProvisioningServices (Device Provisioning Services)
• Microsoft.DigitalTwins/digitalTwinsInstances (Azure Digital Twins)
• Microsoft.DocumentDb/databaseAccounts (Azure Cosmos DB accounts)
  • Sample query: List Azure Cosmos DB with specific write locations
• Microsoft.EventGrid/domains (Event Grid Domains)
• microsoft.eventgrid/partnerdestinations
• Microsoft.EventGrid/partnerNamespaces (Event Grid Partner Namespaces)
• Microsoft.EventHub/namespaces (Event Hubs Namespaces)
• Microsoft.ExtendedLocation/CustomLocations (Custom locations)
  • Sample query: List Azure Arc-enabled custom locations with VMware or SCVMM enabled
• Microsoft.FluidRelay/fluidRelayServers (Fluid Relay)
• Microsoft.HDInsight/clusters (HDInsight clusters)
• Microsoft.HybridCompute/machines (Servers - Azure Arc)
  • Sample query: Get count and percentage of Arc-enabled servers by domain
  • Sample query: List all extensions installed on an Azure Arc-enabled server
  • Sample query: List Arc-enabled servers not running latest released agent version
• microsoft.hybridcompute/machines/extensions
  • Sample query: List all extensions installed on an Azure Arc-enabled server
• Microsoft.HybridCompute/privateLinkScopes (Azure Arc Private Link Scopes)
• Microsoft.ImportExport/jobs (Import/export jobs)
• microsoft.insights/actiongroups
• microsoft.insights/activitylogalerts
• microsoft.insights/alertrules
• microsoft.insights/autoscalesettings
• Microsoft.IoTCentral/IoTApps (IoT Central Applications)
• microsoft.keyvault/managedhsms
• Microsoft.KeyVault/vaults (Key vaults)
  • Sample query: Count key vault resources
  • Sample query: Key vaults with subscription name
  • Sample query: List impacted resources when transferring an Azure subscription
• Microsoft.Kubernetes/connectedClusters (Kubernetes - Azure Arc)
  • Sample query: List all Azure Arc-enabled Kubernetes clusters without Azure Monitor extension
  • Sample query: List all Azure Arc-enabled Kubernetes resources
• Microsoft.Kusto/clusters (Azure Data Explorer Clusters)
• Microsoft.Logic/integrationAccounts (Integration accounts)
• Microsoft.Logic/workflows (Logic apps)
• Microsoft.MachineLearning/webServices (Machine Learning Studio (classic) web services)
• Microsoft.MachineLearningServices/workspaces (Machine learning)
• microsoft.machinelearningservices/workspaces/batchendpoints
• microsoft.machinelearningservices/workspaces/batchendpoints/deployments
• Microsoft.MachineLearningServices/workspaces/onlineEndpoints (Machine learning online endpoints)
• Microsoft.Maintenance/maintenanceConfigurations (Maintenance Configurations)
• Microsoft.ManagedIdentity/userAssignedIdentities (Managed Identities)
  • Sample query: List impacted resources when transferring an Azure subscription
• microsoft.media/mediaservices (Media Services)
• microsoft.media/mediaservices/liveevents (Live events)
• microsoft.media/mediaservices/streamingendpoints (Streaming Endpoints)
• microsoft.migrate/assessmentprojects
• microsoft.migrate/migrateprojects
• microsoft.migrate/movecollections
• microsoft.monitor/accounts
• Microsoft.Network/applicationGateways (Application gateways)
• Microsoft.Network/ApplicationGatewayWebApplicationFirewallPolicies (Web application firewall policies (WAF))
• Microsoft.Network/applicationSecurityGroups (Application security groups)
• Microsoft.Network/azureFirewalls (Firewalls)
• Microsoft.Network/bastionHosts (Bastions)
• Microsoft.Network/connections (Connections)
• Microsoft.Network/dnsForwardingRulesets (Dns Forwarding Rulesets)
• Microsoft.Network/dnsResolvers (DNS Private Resolvers)
• Microsoft.Network/dnsZones (DNS zones)
• Microsoft.Network/expressRouteCircuits (ExpressRoute circuits)
• microsoft.network/expressroutecrossconnections
• microsoft.network/expressroutegateways
• Microsoft.Network/expressRoutePorts (ExpressRoute Direct)
• Microsoft.Network/firewallPolicies (Firewall Policies)
• Microsoft.Network/ipGroups (IP Groups)
• Microsoft.Network/LoadBalancers (Load balancers)
• Microsoft.Network/localnetworkgateways (Local network gateways)
• Microsoft.Network/natGateways (NAT gateways)
• microsoft.network/networkintentpolicies
• Microsoft.Network/networkinterfaces (Network interfaces)
  • Sample query: Get virtual networks and subnets of network interfaces
  • Sample query: List virtual machines with their network interface and public IP
• Microsoft.Network/networkManagers (Network Managers)
• microsoft.network/networkprofiles
• Microsoft.Network/NetworkSecurityGroups (Network security groups)
  • Sample query: Show unassociated network security groups
• microsoft.network/networksecurityperimeters
• microsoft.network/networkwatchers (Network Watchers)
• microsoft.network/networkwatchers/connectionmonitors
• microsoft.network/networkwatchers/flowlogs (NSG Flow Logs)
• microsoft.network/p2svpngateways
• Microsoft.Network/privateDnsZones (Private DNS zones)
• microsoft.network/privatednszones/virtualnetworklinks
• microsoft.network/privateendpointredirectmaps
• Microsoft.Network/privateEndpoints (Private endpoints)
• Microsoft.Network/privateLinkServices (Private link services)
• Microsoft.Network/PublicIpAddresses (Public IP addresses)
  • Sample query: List virtual machines with their network interface and public IP
• Microsoft.Network/publicIpPrefixes (Public IP Prefixes)
• Microsoft.Network/routeFilters (Route filters)
• Microsoft.Network/routeTables (Route tables)
• microsoft.network/securitypartnerproviders
• Microsoft.Network/serviceEndpointPolicies (Service endpoint policies)
• Microsoft.Network/trafficmanagerprofiles (Traffic Manager profiles)
• microsoft.network/virtualhubs
• Microsoft.Network/virtualNetworkGateways (Virtual network gateways)
• Microsoft.Network/virtualNetworks (Virtual networks)
• Microsoft.Network/virtualWans (Virtual WANs)
• microsoft.network/vpngateways
• microsoft.network/vpnserverconfigurations
• microsoft.network/vpnsites
• Microsoft.NotificationHubs/namespaces (Notification Hub Namespaces)
• Microsoft.NotificationHubs/namespaces/notificationHubs (Notification Hubs)
• microsoft.offazure/hypervsites
• microsoft.offazure/importsites
• microsoft.offazure/mastersites
• microsoft.offazure/serversites
• microsoft.offazure/vmwaresites
• microsoft.operationalinsights/clusters
• Microsoft.OperationalInsights/querypacks (Log Analytics query packs)
• Microsoft.OperationalInsights/workspaces (Log Analytics workspaces)
• Microsoft.OperationsManagement/solutions (Solutions)
• Microsoft.Portal/dashboards (Shared dashboards)
• microsoft.powerbi/privatelinkservicesforpowerbi
• microsoft.powerbi/tenants
• microsoft.powerbi/workspacecollections
• microsoft.powerbidedicated/autoscalevcores
• Microsoft.PowerBIDedicated/capacities (Power BI Embedded)
• Microsoft.Purview/Accounts (Purview accounts)
• Microsoft.RecoveryServices/vaults (Recovery Services vaults)
• microsoft.recoveryservices/vaults/replicationfabrics/replicationprotectioncontainers/replicationprotecteditems
• Microsoft.Relay/namespaces (Relays)
• Microsoft.resourcegraph/queries (Resource Graph queries)
• Microsoft.Resources/deploymentScripts (Deployment Scripts)
• Microsoft.Resources/templateSpecs (Template specs)
• microsoft.resources/templatespecs/versions
• Microsoft.Scheduler/jobCollections (Scheduler Job Collections)
• Microsoft.Search/searchServices (Search services)
• microsoft.security/assignments
• microsoft.security/automations
• Microsoft.ServiceBus/namespaces (Service Bus Namespaces)
• Microsoft.ServiceFabric/clusters (Service Fabric clusters)
• Microsoft.ServiceFabric/managedclusters (Service Fabric managed clusters)
• Microsoft.ServicesHub/connectors (Services Hub Connectors)
• Microsoft.SignalRService/SignalR (SignalR)
• Microsoft.SignalRService/WebPubSub (Web PubSub Service)
• Microsoft.Solutions/applicationDefinitions (Service catalog managed application definitions)
• Microsoft.Solutions/applications (Managed applications)
• Microsoft.Sql/managedInstances (SQL managed instances)
• Microsoft.Sql/managedInstances/databases (Managed databases)
• Microsoft.Sql/servers (SQL servers)
• Microsoft.Sql/servers/databases (SQL databases)
  • Sample query: List impacted resources when transferring an Azure subscription
  • Sample query: List SQL Databases and their elastic pools
• Microsoft.Sql/servers/elasticpools (SQL elastic pools)
  • Sample query: List SQL Databases and their elastic pools
• Microsoft.Sql/virtualClusters (Virtual clusters)
• microsoft.sqlvirtualmachine/sqlvirtualmachinegroups
• Microsoft.SqlVirtualMachine/SqlVirtualMachines (SQL virtual machines)
• Microsoft.Storage/StorageAccounts (Storage accounts)
  • Sample query: Find storage accounts with a specific case-insensitive tag on the resource group
  • Sample query: Find storage accounts with a specific case-sensitive tag on the resource group
  • Sample query: List all storage accounts with specific tag value
  • Sample query: List impacted resources when transferring an Azure subscription
• Microsoft.StorageCache/caches (HPC caches)
• Microsoft.StorageSync/storageSyncServices (Storage Sync Services)
• Microsoft.StreamAnalytics/clusters (Stream Analytics clusters)
• Microsoft.StreamAnalytics/StreamingJobs (Stream Analytics jobs)
• Microsoft.Synapse/privateLinkHubs (Azure Synapse Analytics (private link hubs))
• Microsoft.Synapse/workspaces (Azure Synapse Analytics)
• Microsoft.Synapse/workspaces/bigDataPools (Apache Spark pools)
• Microsoft.Synapse/workspaces/sqlPools (Dedicated SQL pools)
• Microsoft.VirtualMachineImages/imageTemplates (Image Templates)
• microsoft.web/certificates
• Microsoft.Web/connectionGateways (On-premises data gateways)
• Microsoft.Web/connections (API Connections)
• Microsoft.Web/customApis (Logic Apps Custom Connector)
• Microsoft.Web/HostingEnvironments (App Service Environments)
• Providers.Test/statefulIbizaEngines (My Resources)

securityresources

For sample queries for this table, see Resource Graph sample queries for securityresources.

• microsoft.security/assessments
  • Sample query: Count healthy, unhealthy, and not applicable resources per recommendation
  • Sample query: List Azure Security Center recommendations
  • Sample query: List Container Registry vulnerability assessment results
  • Sample query: List Qualys vulnerability assessment results
• microsoft.security/assessments/subassessments
  • Sample query: List Container Registry vulnerability assessment results
  • Sample query: List Qualys vulnerability assessment results
• microsoft.security/locations/alerts (Security Alerts)
• microsoft.security/pricings
  • Sample query: Show Azure Defender pricing tier per subscription
• microsoft.security/regulatorycompliancestandards
  • Sample query: Regulatory compliance state per compliance standard
• microsoft.security/regulatorycompliancestandards/regulatorycompliancecontrols
• microsoft.security/regulatorycompliancestandards/regulatorycompliancecontrols/regulatorycomplianceassessments
  • Sample query: Regulatory compliance assessments state
• microsoft.security/securescores
  • Sample query: Secure score per management group
  • Sample query: Secure score per subscription
• microsoft.security/securescores/securescorecontrols
  • Sample query: Controls secure score per subscription

servicehealthresources

For sample queries for this table, see Resource Graph sample queries for servicehealthresources.

• microsoft.resourcehealth/events
  • Sample query: Active Service Health event subscription impact
  • Sample query: All active health advisory events
  • Sample query: All active planned maintenance events
  • Sample query: All active Service Health events
  • Sample query: All active service issue events

Next steps

• Learn more about the query language.
• Learn more about how to explore resources.
• See samples of Starter queries.