Policy: Turbot > IAM > Permissions > Compiled > Levels > Azure [Turbot]

A list of Azure permissions that Guardrails may use to grant permissions on folders that have azure subscription as children.

Resource Types

This policy targets the following resource types:

Policy Specification

Examples [YAML]	`- type: tmod:@turbot/azure-storage#/permission/types/storage level: tmod:@turbot/turbot-iam#/permission/levels/admin - type: tmod:@turbot/azure-iam#/permission/types/iam level: tmod:@turbot/turbot-iam#/permission/levels/admin`

Examples [YAML]

- type: tmod:@turbot/azure-storage#/permission/types/storage
  level: tmod:@turbot/turbot-iam#/permission/levels/admin
- type: tmod:@turbot/azure-iam#/permission/types/iam
  level: tmod:@turbot/turbot-iam#/permission/levels/admin

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/iamPermissions

Policy Type URI

tmod:@turbot/azure-iam#/policy/types/turbotPermissionsCompiledLevels

GraphQL

query policyType(id: "tmod:@turbot/azure-iam#/policy/types/turbotPermissionsCompiledLevels") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/azure-iam#/policy/types/turbotPermissionsCompiledLevels'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/azure-iam#/policy/types/turbotPermissionsCompiledLevels'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/azure-iam#/policy/types/turbotPermissionsCompiledLevels"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/azure-iam#/policy/types/turbotPermissionsCompiledLevels"