AzureInfrastructure is an alias for Azure Resource Manager. Azure Resource Manager is the deployment and management service for Azure. It provides a management layer that enables you to create, update, and delete resources in your Azure account. You use management features, like access control, locks, and tags, to secure and organize your resources after deployment.

Supervisor configuration parameters

To configure the connector, following parameters are required. For more information, refer How to create Service Principal to authenticate the resource management REST APIs:

• Connector name

• Client Id of the app

• Client Secret of the app

• Directory Id of the Active Directory

• Target URL (Cloud application's instance URL used as target URI in payload - Example:https://management.azure.com)

• Instance DateTime Offset (refer Configuring additional datetime offset in connectors for more details).

Supported objects and operations

ManagementGroups

Table 358: Supported operations for ManagementGroups

Operation	VERB
Get ManagementGroup By Id	GET
List ManagementGroups	GET

Subscriptions

Table 359: Supported operations for Subscriptions

Operation	VERB
Get Subscription By Id	GET
List Subscriptions	GET
Get Subscriptions with Pagination	GET

ResourceGroups

Table 360: Supported operations for ResourceGroups

Operation	VERB
Get ResourceGroup By Id	GET
List ResourceGroups	GET
Get ResourceGroups with Pagination	GET

AzResource

Table 361: Supported operations for AzResource

Operation	VERB
List Azresources	GET
Get AzResource by id	GET
Get AzResource with Pagination	GET

AzResourceTypes

Table 362: Supported operations for AzResourceTypes

Operation	VERB
List AzresourcesTypes	GET
Get AzResourceTypes by id	GET

Locations

Table 363: Supported operations for Locations

Operation	VERB
List Locations	GET
Get Location By Id	GET

Roles

Table 364: Supported operations for Divisions

Operation	VERB
Get Role By Id	GET
List Roles	GET

RoleAssignments

Table 365: Supported operations for RoleAssignments

Operation	VERB
Get RoleAssignment By Id	GET
List RoleAssignments	GET
Create RoleAssignments	POST
Delete RoleAssignments	DELETE

Mandatory fields

This section lists the mandatory field required to CREATE.

RoleAssignments

• roleDefinitionId
• principalId
• scope

Attributes Mappings

Different mappings associated with this connector are listed in the tables below.

Table 366: AzureInfrastructure managementGroup to SCIM managementGroup mapping

Azure Infrastructure properties	SCIM properties
id.Replace("/", "$$")	id
name	name
Properties.displayName	displayName
Properties.details.updatedBy	updatedBy
Properties.tenantId	tenantId
properties.details.parent.id	parentManagementGroupId
id	resourceId
role[].value.name	role[].value
role[].value.properties.principalId	role[].principalId
role[].value.properties.principalType	role[].principalType
role[].value.properties.roleDefinitionId	role[].azRoleReference
properties.details.updatedTime	meta.LastModified

Table 367: AzureInfrastructure subscription to SCIM subscription mapping

Azure Infrastructure properties	SCIM properties
id.Replace("/", "$$")	id
name	name
name	subscriptionId
Properties.displayName	displayName
properties.state	state
properties.tenant	tenantId
id	resourceId
properties.parent.id.Split('/')[4]	managementGroupName
properties.parent.id	managementGroupId
role[].value.name	role[].value
role[].value.properties.principalId	role[].principalId
role[].value.properties.principalType	role[].principalType
role[].value.properties.roleDefinitionId	role[].azRoleReference

Table 368: AzureInfrastructure resourceGroup to SCIM resourceGroup mapping

Azure Infrastructure properties	SCIM properties
id.Replace("/", "$$")	id
name	name
name	displayName
location	location
properties.provisioningState	provisioningState
id.Split('/')[2]	subscriptionName
/subscriptions/{id.Split('/')[2]}	subscriptionId
id	resourceId
role[].value.name	role[].value
role[].value.properties.principalId	role[].principalId
role[].value.properties.principalType	role[].principalType
role[].value.properties.roleDefinitionId	role[].azRoleReference

Table 369: AzureInfrastructure resources to SCIM AzResources mapping

Azure Infrastructure properties	SCIM properties
id.Replace("/", "$$")	id
name	name
name	displayName
type	resourceType
location	location
id	resourceId
id.Split('/')[2]	subscriptionName
/subscriptions/{id.Split('/')[2]}	subscriptionId
id.Split('/')[4]	resourceGroupName
/subscriptions/{id.Split('/')[2]}/resourceGroups/{id.Split('/')[4]}	resourceGroupId
tags[].Name	tags[].name
tags[].Value	tags[].value
role[].value.name	role[].value
role[].value.properties.principalId	role[].principalId
role[].value.properties.principalType	role[].principalType
role[].value.properties.roleDefinitionId	role[].azRoleReference

Table 370: AzureInfrastructure roleAssignments to SCIM roleAssignments mapping

Azure Infrastructure properties	SCIM properties
id.Replace(“/”, “$$”)	id
properties.description	description
properties.roleDefinitionId	roleDefinitionId
properties.principalId	principalId
properties.principalType	principalType
properties.scope	scope
id	resourceId
properties.createdOn	meta.Created
properties.updatedOn	meta.LastModified

Table 371: AzureInfrastructure resourceTypes to SCIM AzResourceTypes mapping

Azure Infrastructure properties	SCIM properties
Namespace + '$$' + resourceTypes.resourceType	id
namespace + '/' + resourceTypes.resourceType	displayName

Table 372: AzureInfrastructure locations to SCIM locations mapping

Azure Infrastructure properties	SCIM properties
id.Replace("/", "$$")	id
name	name
displayName	displayName
regionalDisplayName	regionalDisplayName
id	resourceId

Table 373: AzureInfrastructure roles to SCIM roles mapping

Azure Infrastructure properties	SCIM properties
id	id
properties.roleName	displayName
id	resourceId
properties.roleName	name
properties.description	description
properties.type	type
properties.createdOn	meta.Created
properties.updatedOn	meta.LastModified
properties.assignableScopes	assignableScopes

• Pagination is not supported for ManagementGroups, AzResourceTypes, Locations and Roles endpoints.