{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "#/components/schemas/microsoft.graph.unifiedRolePermission",
"title": "unifiedRolePermission",
"required": [
"@odata.type"
],
"type": "object",
"properties": {
"allowedResourceActions": {
"type": "array",
"items": {
"type": "string"
},
"description": "Set of tasks that can be performed on a resource. Required."
},
"condition": {
"type": "string",
"description": "Optional constraints that must be met for the permission to be effective. Not supported for custom roles.",
"nullable": true
},
"excludedResourceActions": {
"type": "array",
"items": {
"type": "string",
"nullable": true
},
"description": "Set of tasks that may not be performed on a resource. Not yet supported."
},
"@odata.type": {
"type": "string"
}
}
}