{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.unifiedRolePermission",
  "title": "unifiedRolePermission",
  "required": [
    "@odata.type"
  ],
  "type": "object",
  "properties": {
    "allowedResourceActions": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Set of tasks that can be performed on a resource. Required."
    },
    "condition": {
      "type": "string",
      "description": "Optional constraints that must be met for the permission to be effective. Not supported for custom roles.",
      "nullable": true
    },
    "excludedResourceActions": {
      "type": "array",
      "items": {
        "type": "string",
        "nullable": true
      },
      "description": "Set of tasks that may not be performed on a resource. Not yet supported."
    },
    "@odata.type": {
      "type": "string"
    }
  }
}