{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "ManagedClusterAADProfile",
  "type": "object",
  "description": "AAD profile for the managed cluster.",
  "properties": {
    "managed": {
      "type": "boolean",
      "description": "Whether to enable managed AAD."
    },
    "enableAzureRBAC": {
      "type": "boolean",
      "description": "Whether to enable Azure RBAC for Kubernetes authorization."
    },
    "adminGroupObjectIDs": {
      "type": "array",
      "description": "The list of AAD group object IDs for cluster admin role."
    },
    "tenantID": {
      "type": "string",
      "description": "The AAD tenant ID for authentication."
    }
  }
}