// RoleAssignment The Role Assignment resource. Role assignments tie together a role definition with members and scopes. There can be one or more role assignments per role. This applies to custom and built-in roles.
typeRoleAssignmentstruct{
// Entity is the base model of RoleAssignment
Entity
// DisplayName The display or friendly name of the role Assignment.
DisplayName*string`json:"displayName,omitempty"`
// Description Description of the Role Assignment.
Description*string`json:"description,omitempty"`
// ScopeMembers List of ids of role scope member security groups. These are IDs from Azure Active Directory.
// ScopeType Specifies the type of scope for a Role Assignment. Default type 'ResourceScope' allows assignment of ResourceScopes. For 'AllDevices', 'AllLicensedUsers', and 'AllDevicesAndLicensedUsers', the ResourceScopes property should be left empty.
// RoleDefinition The Role Definition resource. The role definition is the foundation of role based access in Intune. The role combines an Intune resource such as a Mobile App and associated role permissions such as Create or Read for the resource. There are two types of roles, built-in and custom. Built-in roles cannot be modified. Both built-in roles and custom roles must have assignments to be enforced. Create custom roles if you want to define a role that allows any of the available resources and role permissions to be combined into a single role.
typeRoleDefinitionstruct{
// Entity is the base model of RoleDefinition
Entity
// DisplayName Display Name of the Role definition.
DisplayName*string`json:"displayName,omitempty"`
// Description Description of the Role definition.
Description*string`json:"description,omitempty"`
// Permissions List of Role Permissions this role is allowed to perform. These must match the actionName that is defined as part of the rolePermission.
// RolePermissions List of Role Permissions this role is allowed to perform. These must match the actionName that is defined as part of the rolePermission.