CmdID / az / az role / az role deny-assignment
az role deny-assignment create
Create a user-assigned deny assignment. Azure CLI reference
9 options Its page in the Azure CLI reference
Options
--actionsSpace-separated list of actions to deny, e.g. "Microsoft.Authorization/roleAssignments/write".--assignment-nameA GUID for the deny assignment.--descriptionDescription of the deny assignment.--exclude-principal-idsSpace-separated list of principal object IDs to exclude from the deny.--exclude-principal-typesSpace-separated list of principal types corresponding to --exclude-principal-ids.--name, -nThe display name of the deny assignment.--not-actionsSpace-separated list of actions to exclude from the deny.--principal-object-idThe object ID of a specific User or ServicePrincipal to deny.--principal-typeThe type of the principal specified by --principal-object-id.