EncryptionSetIdentity Class

The managed identity for the disk encryption set. It should be given permission on the key vault before it can be used to encrypt disks.

Constructor

EncryptionSetIdentity(*args: Any, **kwargs: Any)

Variables

Name Description
type
str or DiskEncryptionSetIdentityType

The type of Managed Identity used by the DiskEncryptionSet. Only SystemAssigned is supported for new creations. Disk Encryption Sets can be updated with Identity type None during migration of subscription to a new Azure Active Directory tenant; it will cause the encrypted resources to lose access to the keys. Known values are: "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", and "None".
principal_id
str

The object id of the Managed Identity Resource. This will be sent to the RP from ARM via the x-ms-identity-principal-id header in the PUT request if the resource has a systemAssigned(implicit) identity.
tenant_id
str

The tenant id of the Managed Identity Resource. This will be sent to the RP from ARM via the x-ms-client-tenant-id header in the PUT request if the resource has a systemAssigned(implicit) identity.
user_assigned_identities
dict[str, UserAssignedIdentitiesValue]

The list of user identities associated with the disk encryption set. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.

Attributes

principal_id

The object id of the Managed Identity Resource. This will be sent to the RP from ARM via the x-ms-identity-principal-id header in the PUT request if the resource has a systemAssigned(implicit) identity.

principal_id: str | None

tenant_id

The tenant id of the Managed Identity Resource. This will be sent to the RP from ARM via the x-ms-client-tenant-id header in the PUT request if the resource has a systemAssigned(implicit) identity.

tenant_id: str | None

type

The type of Managed Identity used by the DiskEncryptionSet. Only SystemAssigned is supported for new creations. Disk Encryption Sets can be updated with Identity type None during migration of subscription to a new Azure Active Directory tenant; it will cause the encrypted resources to lose access to the keys. Known values are: "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", and "None".

type: str | _models.DiskEncryptionSetIdentityType | None

user_assigned_identities

The list of user identities associated with the disk encryption set. The user identity dictionary key references will be ARM resource ids in the form: '/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.ManagedIdentity/userAssignedIdentities/{identityName}'.

user_assigned_identities: dict[str, '_models.UserAssignedIdentitiesValue'] | None