{
  "swagger": "2.0",
  "info": {
    "title": "AuthorizationManagementClient",
    "version": "2020-10-01",
    "description": "Role based access control provides you a way to apply granular level policy administration down to individual resources or resource groups. These operations enable you to manage role assignments. A role eligibility grants access to Azure Active Directory users."
  },
  "host": "management.azure.com",
  "schemes": [
    "https"
  ],
  "consumes": [
    "application/json"
  ],
  "produces": [
    "application/json"
  ],
  "security": [
    {
      "azure_auth": [
        "user_impersonation"
      ]
    }
  ],
  "securityDefinitions": {
    "azure_auth": {
      "type": "oauth2",
      "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize",
      "flow": "implicit",
      "description": "Azure Active Directory OAuth2 Flow",
      "scopes": {
        "user_impersonation": "impersonate your user account"
      }
    }
  },
  "paths": {
    "/{scope}/providers/Microsoft.Authorization/roleEligibilityScheduleInstances": {
      "get": {
        "tags": [
          "roleEligibilityScheduleInstances"
        ],
        "operationId": "RoleEligibilityScheduleInstances_ListForScope",
        "description": "Gets role eligibility schedule instances of a role eligibility schedule.",
        "parameters": [
          {
            "name": "scope",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The scope of the role eligibility schedule.",
            "x-ms-skip-url-encoding": true
          },
          {
            "name": "$filter",
            "in": "query",
            "required": false,
            "type": "string",
            "description": "The filter to apply on the operation. Use $filter=atScope() to return all role assignment schedules at or above the scope. Use $filter=principalId eq {id} to return all role assignment schedules at, above or below the scope for the specified principal. Use $filter=assignedTo('{userId}') to return all role eligibility schedules for the user. Use $filter=asTarget() to return all role eligibility schedules created for the current user."
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v2/types.json#/parameters/ApiVersionParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK - Returns array of role eligibility schedule instances.",
            "schema": {
              "$ref": "#/definitions/RoleEligibilityScheduleInstanceListResult"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-pageable": {
          "nextLinkName": "nextLink"
        },
        "x-ms-odata": "#/definitions/RoleEligibilityScheduleInstanceFilter",
        "x-ms-examples": {
          "GetRoleEligibilityScheduleInstancesByScope": {
            "$ref": "./examples/GetRoleEligibilityScheduleInstancesByScope.json"
          }
        }
      }
    },
    "/{scope}/providers/Microsoft.Authorization/roleEligibilityScheduleInstances/{roleEligibilityScheduleInstanceName}": {
      "get": {
        "tags": [
          "roleEligibilityScheduleInstances"
        ],
        "operationId": "RoleEligibilityScheduleInstances_Get",
        "description": "Gets the specified role eligibility schedule instance.",
        "parameters": [
          {
            "name": "scope",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The scope of the role eligibility schedules.",
            "x-ms-skip-url-encoding": true
          },
          {
            "name": "roleEligibilityScheduleInstanceName",
            "in": "path",
            "required": true,
            "type": "string",
            "description": "The name (hash of schedule name + time) of the role eligibility schedule to get."
          },
          {
            "$ref": "../../../../../../common-types/resource-management/v2/types.json#/parameters/ApiVersionParameter"
          }
        ],
        "responses": {
          "200": {
            "description": "OK - Returns information about the role eligibility schedule instance.",
            "schema": {
              "$ref": "#/definitions/RoleEligibilityScheduleInstance"
            }
          },
          "default": {
            "description": "Error response describing why the operation failed.",
            "schema": {
              "$ref": "#/definitions/CloudError"
            }
          }
        },
        "x-ms-examples": {
          "GetRoleEligibilityScheduleInstanceByName": {
            "$ref": "./examples/GetRoleEligibilityScheduleInstanceByName.json"
          }
        }
      }
    }
  },
  "definitions": {
    "RoleEligibilityScheduleInstanceFilter": {
      "properties": {
        "principalId": {
          "type": "string",
          "description": "Returns role eligibility schedule instances of the specific principal."
        },
        "roleDefinitionId": {
          "type": "string",
          "description": "Returns role eligibility schedule instances of the specific role definition."
        },
        "status": {
          "type": "string",
          "description": "Returns role eligibility schedule instances of the specific status."
        },
        "roleEligibilityScheduleId": {
          "type": "string",
          "description": "Returns role eligibility schedule instances belonging to a specific role eligibility schedule."
        }
      },
      "type": "object",
      "description": "Role eligibility schedule instance filter"
    },
    "RoleEligibilityScheduleInstanceProperties": {
      "properties": {
        "scope": {
          "type": "string",
          "description": "The role eligibility schedule scope."
        },
        "roleDefinitionId": {
          "type": "string",
          "description": "The role definition ID."
        },
        "principalId": {
          "type": "string",
          "description": "The principal ID."
        },
        "principalType": {
          "type": "string",
          "description": "The principal type of the assigned principal ID.",
          "enum": [
            "User",
            "Group",
            "ServicePrincipal",
            "ForeignGroup",
            "Device"
          ],
          "x-ms-enum": {
            "name": "principalType",
            "modelAsString": true
          }
        },
        "roleEligibilityScheduleId": {
          "type": "string",
          "description": "Id of the master role eligibility schedule"
        },
        "status": {
          "type": "string",
          "description": "The status of the role eligibility schedule instance",
          "enum": [
            "Accepted",
            "PendingEvaluation",
            "Granted",
            "Denied",
            "PendingProvisioning",
            "Provisioned",
            "PendingRevocation",
            "Revoked",
            "Canceled",
            "Failed",
            "PendingApprovalProvisioning",
            "PendingApproval",
            "FailedAsResourceIsLocked",
            "PendingAdminDecision",
            "AdminApproved",
            "AdminDenied",
            "TimedOut",
            "ProvisioningStarted",
            "Invalid",
            "PendingScheduleCreation",
            "ScheduleCreated",
            "PendingExternalProvisioning"
          ],
          "x-ms-enum": {
            "name": "Status",
            "modelAsString": true
          }
        },
        "startDateTime": {
          "type": "string",
          "format": "date-time",
          "description": "The startDateTime of the role eligibility schedule instance"
        },
        "endDateTime": {
          "type": "string",
          "format": "date-time",
          "description": "The endDateTime of the role eligibility schedule instance"
        },
        "memberType": {
          "type": "string",
          "description": "Membership type of the role eligibility schedule",
          "enum": [
            "Inherited",
            "Direct",
            "Group"
          ],
          "x-ms-enum": {
            "name": "MemberType",
            "modelAsString": true
          }
        },
        "condition": {
          "type": "string",
          "description": "The conditions on the role assignment. This limits the resources it can be assigned to. e.g.: @Resource[Microsoft.Storage/storageAccounts/blobServices/containers:ContainerName] StringEqualsIgnoreCase 'foo_storage_container'"
        },
        "conditionVersion": {
          "type": "string",
          "description": "Version of the condition. Currently accepted value is '2.0'"
        },
        "createdOn": {
          "type": "string",
          "format": "date-time",
          "description": "DateTime when role eligibility schedule was created"
        },
        "expandedProperties": {
          "type": "object",
          "description": "Additional properties of principal, scope and role definition",
          "$ref": "#/definitions/ExpandedProperties"
        }
      },
      "type": "object",
      "description": "Role eligibility schedule properties with scope."
    },
    "RoleEligibilityScheduleInstance": {
      "properties": {
        "id": {
          "type": "string",
          "readOnly": true,
          "description": "The role eligibility schedule instance ID."
        },
        "name": {
          "type": "string",
          "readOnly": true,
          "description": "The role eligibility schedule instance name."
        },
        "type": {
          "type": "string",
          "readOnly": true,
          "description": "The role eligibility schedule instance type."
        },
        "properties": {
          "x-ms-client-flatten": true,
          "$ref": "#/definitions/RoleEligibilityScheduleInstanceProperties",
          "description": "Role eligibility schedule instance properties."
        }
      },
      "type": "object",
      "description": "Information about current or upcoming role eligibility schedule instance"
    },
    "RoleEligibilityScheduleInstanceListResult": {
      "properties": {
        "value": {
          "type": "array",
          "items": {
            "$ref": "#/definitions/RoleEligibilityScheduleInstance"
          },
          "description": "Role eligibility schedule instance list."
        },
        "nextLink": {
          "type": "string",
          "description": "The URL to use for getting the next set of results."
        }
      },
      "type": "object",
      "description": "Role eligibility schedule instance list operation result."
    },
    "CloudError": {
      "x-ms-external": true,
      "properties": {
        "error": {
          "$ref": "#/definitions/CloudErrorBody"
        }
      },
      "type": "object",
      "description": "An error response from the service."
    },
    "CloudErrorBody": {
      "x-ms-external": true,
      "properties": {
        "code": {
          "type": "string",
          "description": "An identifier for the error. Codes are invariant and are intended to be consumed programmatically."
        },
        "message": {
          "type": "string",
          "description": "A message describing the error, intended to be suitable for display in a user interface."
        }
      },
      "type": "object",
      "description": "An error response from the service."
    },
    "ExpandedProperties": {
      "properties": {
        "scope": {
          "type": "object",
          "description": "Details of the resource scope",
          "properties": {
            "id": {
              "type": "string",
              "description": "Scope id of the resource"
            },
            "displayName": {
              "type": "string",
              "description": "Display name of the resource"
            },
            "type": {
              "type": "string",
              "description": "Type of the resource"
            }
          }
        },
        "roleDefinition": {
          "type": "object",
          "description": "Details of role definition",
          "properties": {
            "id": {
              "type": "string",
              "description": "Id of the role definition"
            },
            "displayName": {
              "type": "string",
              "description": "Display name of the role definition"
            },
            "type": {
              "type": "string",
              "description": "Type of the role definition"
            }
          }
        },
        "principal": {
          "type": "object",
          "description": "Details of the principal",
          "properties": {
            "id": {
              "type": "string",
              "description": "Id of the principal"
            },
            "displayName": {
              "type": "string",
              "description": "Display name of the principal"
            },
            "email": {
              "type": "string",
              "description": "Email id of the principal"
            },
            "type": {
              "type": "string",
              "description": "Type of the principal"
            }
          }
        }
      },
      "type": "object"
    }
  }
}